Record 7940
{
"Event": {
"#attributes": {
"xmlns": "http://schemas.microsoft.com/win/2023/02/events/event"
},
"EventData": {
"MessageNumber": 1,
"MessageTotal": 1,
"Path": "",
"ScriptBlockId": "b0d4f117-b6d4-449b-a179-2c59d6b4f548",
"ScriptBlockText": "del .\\Top_Secret.txt"
},
"System": {
"Channel": "Microsoft-Windows-PowerShell/Operational",
"Computer": "MarySue",
"Correlation": {
"#attributes": {
"ActivityID": "54BDC5C1-F7AB-0001-BA76-BF54ABF7D801"
}
},
"EventID": 4104,
"EventRecordID": 8428,
"Execution": {
"#attributes": {
"ProcessID": 1216,
"ThreadID": 4080
}
