- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="CiscoSecureEndpoint" Guid="{0643104d-3c79-4ed5-9ed4-cd8e803fea9c}" /> 
  <EventID>1311</EventID> 
  <Version>1</Version> 
  <Level>2</Level> 
  <Task>11</Task> 
  <Opcode>0</Opcode> 
  <Keywords>0x8000000000000000</Keywords> 
  <TimeCreated SystemTime="2023-11-13T10:09:08.6095682Z" /> 
  <EventRecordID>54</EventRecordID> 
  <Correlation /> 
  <Execution ProcessID="5636" ThreadID="5884" /> 
  <Channel>CiscoSecureEndpoint/Events</Channel> 
  <Computer>**************</Computer> 
  <Security UserID="S-1-5-18" /> 
  </System>
- <EventData>
  <Data Name="DetectionId">7300886693106679830</Data> 
  <Data Name="DetectedFilePath">C:\Experiments\myimageapp\myimageapp.exe</Data> 
  </EventData>
  </Event>