{"Publisher":"Microsoft-Windows-NTLM","EventIDs":[100,101,4001,4002,4003,4010,4011,4012,4013,8001,8002,8003]}