Sysmon event id 4625 July 8, 2019 16 32 64 128 Sysmon event id 4 Sysmon event id 6 Sysmon event id 24 Sysmon event id 1 vs 4688
