0x8010000000000000 Security //Data[@Name='IpAddress'] .+) ]]> 0x90000000000000 System //Provider[@Name='MSSQLSERVER'] //Data .*?)\] ]]> 0x90000000000000 Application //Provider[@Name='MSSQLSERVER'] //Data .*?)\] ]]> 0x80000000000000 Application //Provider[@Name='MySQL'] //Data .*?)' ]]> 0x80000000000000 System //Provider[@Name='MSExchangeTransport'] //Data LogonDenied //Data .+) ]]>