Microsoft-Windows-Sysmon/Operational eventchannel