The sysmon event id 1 corresponds to July 8, 2019 16 32 64 128 Sysmon event id 4 Sysmon event id 22 Sysmon event id 23
