The sysmon event id 5 corresponds to July 8, 2019 16 32 64 128 Event id 5 sysmon Sysmon event id 4 Sysmon event code 5
