



CreatorSID={1,2,0,0,0,0,0,5,32,0,0,0,32,2,0,0}

EventAccess=

EventNamespace=root\cimv2

Name=SCM Event Log Filter

Query=select * from MSFT_SCMEventLogEvent

QueryLanguage=WQL







