<?xml version='1.0' encoding='utf-8'?>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <!--SYNTHETIC SELECTED-FIELD XML SAMPLE - not an original EVTX export.-->
  <System>
    <Provider Name="Microsoft-Windows-Security-Auditing" />
    <EventID>4663</EventID>
    <TimeCreated SystemTime="2026-10-13T06:18:33Z" />
    <EventRecordID>42</EventRecordID>
    <Channel>Security</Channel>
    <Computer>DEMO-PC01</Computer>
  </System>
  <EventData>
    <Data Name="SubjectUserName">demo.kullanici</Data>
    <Data Name="SubjectLogonId">0x57a1</Data>
    <Data Name="ObjectType">File</Data>
    <Data Name="ObjectName">C:\Demo\rapor_ornek.xlsx</Data>
    <Data Name="AccessMask">0x1</Data>
    <Data Name="ProcessName">C:\Demo\viewer.exe</Data>
  </EventData>
</Event>