<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Microsoft-Windows-Sysmon' Guid='{5770385f-c22a-43e0-bf4c-06f5698ffbd9}'/><EventID>13</EventID><Version>2</Version><Level>4</Level><Task>13</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2020-05-05T14:57:40.599567200Z'/><EventRecordID>2682</EventRecordID><Correlation/><Execution ProcessID='5496' ThreadID='876'/><Channel>Microsoft-Windows-Sysmon/Operational</Channel><Computer>vagrant</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='RuleName'>-</Data><Data Name='EventType'>SetValue</Data><Data Name='UtcTime'>2020-05-05 14:57:40.589</Data><Data Name='ProcessGuid'>{5b522f6e-77ae-5eb1-2c03-000000000800}</Data><Data Name='ProcessId'>6072</Data><Data Name='Image'>C:\Windows\regedit.exe</Data><Data Name='TargetObject'>HKU\S-1-5-21-1067164964-2079179834-2367582738-1000\Software\Key 1</Data><Data Name='Details'>DWORD (0x00000004)</Data></EventData></Event>
