$ 0 0 Queries to parse sysmon event log file with Microsoft logparsermore here..........https://github.com/JamesHabben/sysmon-queries