Loging Server Process V2
Enviado por JonathanDoe • 30 de Enero de 2019 • Informes • 531 Palabras (3 Páginas) • 170 Visitas
<ViewerConfig>
<QueryConfig>
<QueryParams>
<UserQuery />
</QueryParams>
<QueryNode>
<Name LanguageNeutralValue="Device Manager - TOSHIBA MSFT NORB USB Device">Device Manager - TOSHIBA MSFT NORB USB Device</Name>
<QueryList>
<Query Id="0" Path="Microsoft-Windows-Kernel-PnP/Configuration">
<Select Path="Microsoft-Windows-Kernel-PnP/Configuration">*[System/Provider[@Name='Microsoft-Windows-Kernel-PnP'] and EventData/Data[@Name='DeviceInstanceID']='USBSTOR\DISK&VEN_TOSHIBA&PROD_MSFT_NORB&REV_PMAP\07088914C2907143&0']</Select>
<Select Path="System">*[System/Provider[@Name='Microsoft-Windows-UserPnp'] and UserData/*/DeviceInstanceID='USBSTOR\DISK&VEN_TOSHIBA&PROD_MSFT_NORB&REV_PMAP\07088914C2907143&0']</Select>
</Query>
</QueryList>
</QueryNode>
</QueryConfig>
<ResultsConfig>
<Columns>
<Column Name="Level" Type="System.String" Path="Event/System/Level" Visible="">176</Column>
<Column Name="Keywords" Type="System.String" Path="Event/System/Keywords">70</Column>
<Column Name="Date and Time" Type="System.DateTime" Path="Event/System/TimeCreated/@SystemTime" Visible="">226</Column>
<Column Name="Source" Type="System.String" Path="Event/System/Provider/@Name" Visible="">136</Column>
<Column Name="Event ID" Type="System.UInt32" Path="Event/System/EventID" Visible="">136</Column>
<Column Name="Task Category" Type="System.String" Path="Event/System/Task" Visible="">137</Column>
<Column Name="User" Type="System.String" Path="Event/System/Security/@UserID">50</Column>
...