<?xml version='1.0' encoding='utf-8'?>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <!--SYNTHETIC SELECTED-FIELD XML SAMPLE - not an original EVTX export.-->
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" />
    <EventID>4624</EventID>
    <TimeCreated SystemTime="2026-10-13T06:12:08Z" />
    <EventRecordID>17</EventRecordID>
    <Channel>Security</Channel>
    <Computer>DEMO-PC01</Computer>
  </System>
  <EventData>
    <Data Name="TargetUserName">demo.kullanici</Data>
    <Data Name="TargetDomainName">DEMO-PC01</Data>
    <Data Name="TargetLogonId">0x57a1</Data>
    <Data Name="LogonType">3</Data>
    <Data Name="IpAddress">192.0.2.24</Data>
  </EventData>
</Event>