text: __WINDOWS_PROVIDERS__ = [
      'Active Directory Web Services',
      'ADWS',
      '.NET Runtime',
      '.NET Runtime Optimization Service',
      'Application',
      'Application Error',
      'Application Hang',
      'Application Management',
      'ASP.NET 2.0.50727.0',
      'CardSpace 4.0.0.0',
      'Chkdsk',
      'Chrome',
      'DeliveryOptimization',
      'Desktop Window Manager',
      'DiskQuota',
      'DSReplicationProvider',
      'Dwminit',
      'ESENT',
      'Group Policy Applications',
      'Group Policy Client',
      'Group Policy Data Sources',
      'Group Policy Device Settings',
      'Group Policy Drive Maps',
      'Group Policy Environment',
      'Group Policy Files',
      'Group Policy Folder Options',
      'Group Policy Folders',
      'Group Policy HTML View Extension',
      'Group Policy Ini Files',
      'Group Policy Internet Settings',
      'Group Policy Local Users and Groups',
      'Group Policy Mail Profiles',
      'Group Policy Management',
      'Group Policy Network Options',
      'Group Policy Network Shares',
      'Group Policy Power Options',
      'Group Policy Printers',
      'Group Policy Regional Options',
      'Group Policy Registry',
      'Group Policy Scheduled Tasks',
      'Group Policy Services',
      'Group Policy Shortcuts',
      'Group Policy Standard Edition',
      'Group Policy Start Menu Settings',
      'GroupPolicy',
      'Handwriting Recognition',
      'Lync',
      'LyncPlatform',
      'Microsoft Office 16',
      'Microsoft-Windows-Defrag',
      'Microsoft.Transactions.Bridge 3.0.0.0',
      'Microsoft.Transactions.Bridge 4.0.0.0',
      'MsiInstaller',
      'MSSOAP',
      'Outlook',
      'RasClient',
      'SceCli',
      'SceSrv',
      'ServiceModel Audit 3.0.0.0',
      'ServiceModel Audit 4.0.0.0',
      'SideBySide',
      'Software Installation',
      'SpeechRuntime',
      'SrmSvc',
      'System.IdentityModel 3.0.0.0',
      'System.IdentityModel 4.0.0.0',
      'System.IO.Log 3.0.0.0',
      'System.IO.Log 4.0.0.0',
      'System.Runtime.Serialization 3.0.0.0',
      'System.Runtime.Serialization 4.0.0.0',
      'System.ServiceModel 3.0.0.0',
      'System.ServiceModel 4.0.0.0',
      'TrustMonitor',
      'usbperf',
      'VBRuntime',
      'VSS',
      'VSTO 4.0',
      'WDATPOnboarding',
      'WerSvc',
      'Windows Error Reporting',
      'WLMS',
      'WMI.NET Provider Extension',
      'Wow64 Emulation Layer',
      'WSH',
      'DFS Replication',
      'DFSR',
      'NTDS ISAM',
      'Microsoft-Windows-WSMAN-SEL_LogRecord',
      'Microsoft Office 16 Alerts',
      'DS',
      'LSA',
      'SC Manager',
      'Security',
      'Security Account Manager',
      'ServiceModel 3.0.0.0',
      'ServiceModel 4.0.0.0',
      'Spooler',
      'TCP/IP',
      'VSSAudit',
      '3ware',
      'ACPI',
      'ADP80XX',
      'AFD',
      'AmdK8',
      'AmdPPM',
      'amdsata',
      'amdsbs',
      'amdxata',
      'Application Management Group Policy',
      'arcsas',
      'AsyncMac',
      'atapi',
      'b06bdrv',
      'BasicRender',
      'beep',
      'bfadfcoei',
      'bfadi',
      'BthEnum',
      'BthLEEnum',
      'BthMini',
      'BTHPORT',
      'BTHUSB',
      'bxfcoe',
      'bxois',
      'cdrom',
      'cht4iscsi',
      'cht4vbd',
      'disk',
      'Display',
      'Dnsapi',
      'Dnscache',
      'E1G60',
      'ebdrv',
      'elxfcoe',
      'elxstor',
      'eventlog',
      'exFAT',
      'FltMgr',
      'HpSAMD',
      'i8042prt',
      'iaStorAVC',
      'iaStorV',
      'ibbus',
      'intelppm',
      'IPMIDRV',
      'isapnp',
      'iScsiPrt',
      'ItSas35i',
      'kbdclass',
      'kbdhid',
      'kdnic',
      'Lfsvc',
      'lltdio',
      'LmHosts',
      'LSI_SAS',
      'LSI_SAS2i',
      'LSI_SAS3i',
      'LSI_SSS',
      'megasas',
      'megasas2i',
      'megasas35i',
      'megasr',
      'mlx4_bus',
      'mouclass',
      'mouhid',
      'mrxsmb',
      'MsBridge',
      'MSDTC Gateway',
      'MSDTC WS-AT Protocol',
      'mshidumdf',
      'MSiSCSI',
      'MTConfig',
      'Mup',
      'mvumis',
      'NdisImPlatform',
      'NdisWan',
      'ndiswanlegacy',
      'NetBIOS',
      'NetBT',
      'Netlogon',
      'Ntfs',
      'nvdimm',
      'nvstor',
      'Parport',
      'partmgr',
      'pcmcia',
      'percsas2i',
      'percsas3i',
      'pmem',
      'PNPMEM',
      'Power',
      'PptpMiniport',
      'Processor',
      'qebdrv',
      'qefcoe',
      'qeois',
      'ql2300i',
      'ql40xx2i',
      'qlfcoei',
      'RasAuto',
      'RasCfg',
      'Rasman',
      'rdbss',
      'RemoteAccess',
      'RFCOMM',
      'rhproxy',
      'rspndr',
      'sbp2port',
      'scmbus',
      'sercx',
      'sercx2',
      'Serial',
      'sermouse',
      'Server',
      'SiSRaid2',
      'SiSRaid4',
      'SmartSAMD',
      'SMSvcHost 3.0.0.0',
      'SMSvcHost 4.0.0.0',
      'SNMPTRAP',
      'spaceport',
      'spbcx',
      'Srv',
      'stexstor',
      'StillImage',
      'storahci',
      'stornvme',
      'System',
      'Tcpip',
      'Tcpip6',
      'TCPMon',
      'tunnel',
      'UASPStor',
      'UEFI',
      'usbehci',
      'usbser',
      'VBoxWddm',
      'VDS Basic Provider',
      'VDS Dynamic Provider',
      'VDS Virtual Disk Provider',
      'Virtual Disk Service',
      'volmgr',
      'vpci',
      'vsmraid',
      'VSTXRAID',
      'WacomPen',
      'wdf01000',
      'wecsvc',
      'Win32k',
      'Windows Disk Diagnostic',
      'Windows Script Host',
      'WinNat',
      'WMIxWDM',
      'Workstation',
      'PowerShell',
      'Microsoft-Windows-Services',
      'Microsoft-Windows-Security-IdentityStore',
      'Microsoft-Windows-VAN',
      'Microsoft-Windows-ErrorReportingConsole',
      'Microsoft-Windows-Registry-SQM-Provider',
      'Microsoft-Windows-MiStreamProvider',
      'Microsoft-Windows-Bluetooth-MTPEnum',
      'Microsoft-Windows-PDH',
      'Microsoft-Windows-Diagnosis-WDC',
      'Microsoft-Windows-Shsvcs',
      'Microsoft-Windows-ReFS-v1',
      'Microsoft-Windows-TaskbarCPL',
      'Microsoft-Windows-LiveId',
      'Microsoft-Windows-Bluetooth-Policy',
      'Microsoft-Windows-Services-Svchost',
      'Microsoft-Windows-TimeBroker',
      'Microsoft-Windows-Time-Service',
      'Microsoft-Windows-VolumeControl',
      'Microsoft-Windows-Security-Audit-Configuration-Client',
      'Microsoft-Windows-RestartManager',
      'Microsoft-Windows-Shell-AppWizCpl',
      'Microsoft-Windows-Winsock-SQM',
      'Microsoft-Windows-WUSA',
      'Microsoft-Windows-LDAP-Client',
      'Microsoft-Windows-SmartCard-Audit',
      'Microsoft-Windows-DeviceSync',
      'Microsoft-Antimalware-Engine',
      'Microsoft-Windows-ClearTypeTextTuner',
      'Microsoft-Windows-CoreSystem-InitMachineConfig',
      'Microsoft-Windows-Hyper-V-Guest-Drivers-Storage-Filter',
      'Microsoft-Windows-UserDataAccess-Poom',
      'Microsoft-Windows-Kernel-ShimEngine',
      'Microsoft-Windows-WFP',
      'Microsoft-Windows-AppSruProv',
      'Microsoft-Windows-Directory-Services-SAM',
      'Microsoft-Windows-WMP-Setup_WM',
      'Microsoft-Windows-ActionQueue',
      'Microsoft-Windows-ActiveDirectory_DomainService',
      'Microsoft-Windows-Complus',
      'Microsoft-Windows-OOBE-Machine-Plugins-Wireless',
      'Microsoft-Windows-Kernel-Processor-Power',
      'Microsoft-Windows-PersistentMemory-PmemDisk',
      'Microsoft-Windows-Mobile-Broadband-Experience-SmsApi',
      'Microsoft-Windows-ApplicabilityEngine',
      'Microsoft-Windows-RemoteDesktopServices-RdpCoreTS',
      'Microsoft-Windows-WindowsSystemAssessmentTool',
      'Microsoft-Windows-Shell-OpenWith',
      'Microsoft-Windows-NdisImPlatformEventProvider',
      'Microsoft-Windows-Windows Defender',
      'Microsoft-Windows-Base-Filtering-Engine-Connections',
      'Microsoft-Windows-LoadPerf',
      'Microsoft-Windows-SmartCard-TPM-VCard-Module',
      'Microsoft-Windows-Ncasvc',
      'Microsoft-Windows-TerminalServices-RdpSoundDriver',
      'Microsoft-Windows-Globalization',
      'Microsoft-Windows-Speech-UserExperience',
      'Microsoft-Windows-HomeGroup-ControlPanel',
      'Microsoft-Windows-Perflib',
      'Microsoft-Windows-DataIntegrityScan',
      'Microsoft-Windows-WMI-Activity',
      'Microsoft-Windows-IME-JPSetting',
      'Microsoft-Windows-Hyper-V-Netvsc',
      'Microsoft-Windows-Crypto-RSAEnh',
      'Microsoft-Windows-MSDTC Client 2',
      'Microsoft-Windows-Dhcp-Client',
      'Microsoft-Windows-Kernel-Boot',
      'Microsoft-Windows-Kernel-AppCompat',
      'Microsoft-Windows-SEC',
      'Microsoft-Windows-Diagnosis-AdvancedTaskManager',
      'Microsoft-Windows-ApplicationExperience-SwitchBack',
      'Microsoft-Windows-MsiServer',
      'Microsoft-Windows-WABSyncProvider',
      'Microsoft-Windows-ApplicationExperience-LookupServiceTrigger',
      'Microsoft-Windows-DisplaySwitch',
      'LsaSrv',
      'Microsoft-Windows-AsynchronousCausality',
      'Microsoft-Windows-OLEACC',
      'Microsoft-Windows-DiagCpl',
      'Microsoft-Windows-EnergyEfficiencyWizard',
      'Microsoft-Windows-Remotefs-Rdbss',
      'Microsoft-Windows-PCI',
      'Microsoft-Windows-DistributedCOM',
      'TPM',
      'Microsoft-Windows-IME-CustomerFeedbackManagerUI',
      'Microsoft-Windows-RemoteApp and Desktop Connections',
      'Microsoft-Windows-Spellchecking-Host',
      'Microsoft-Windows-StorSqm',
      'Microsoft-Windows-DNS-Client',
      'Microsoft-Windows-DeviceConfidence',
      'Microsoft-Windows-MSPaint',
      'Microsoft-Windows-Backup',
      'Microsoft-Windows-AppModel-MessagingDataModel',
      'Microsoft-Windows-Networking-RealTimeCommunication',
      'Microsoft-Windows-NetworkProvider',
      'Microsoft-User Experience Virtualization-App Agent',
      'Microsoft-Windows-WMI',
      'Microsoft-Windows-XAudio2',
      'Schannel',
      'Microsoft-Windows-Shell-ZipFolder',
      'Microsoft-Windows-Wininit',
      'Microsoft-Windows-TerminalServices-SessionBroker-Client',
      'Microsoft-Windows-WPD-MTPClassDriver',
      'Microsoft-User Experience Virtualization-IPC',
      'Microsoft-Windows-Kernel-Process',
      'Microsoft-Windows-WlanConn',
      'Microsoft-Windows-User Device Registration',
      'Microsoft-Windows-URLMon',
      'Microsoft-Windows-RRAS',
      'Microsoft-Windows-UserAccountControl',
      'Microsoft-Windows-DxpTaskSyncProvider',
      'Microsoft-Windows-RPC-Proxy-LBS',
      'Microsoft-Windows-TerminalServices-PnPDevices',
      'Microsoft-Windows-Proximity-Common',
      'Microsoft-Windows-EDP-Audit-TCB',
      'Microsoft-Windows-TerminalServices-ClientActiveXCore',
      'Microsoft-AppV-Client-StreamingUX',
      'Microsoft-Windows-Mobile-Broadband-Experience-Parser-Task',
      'Microsoft-Windows-Dwm-Api',
      'Microsoft-Windows-COM-RundownInstrumentation',
      'Microsoft-Windows-RasServer',
      'Microsoft-Windows-IPMIProvider',
      'Microsoft-Windows-MFH264Enc',
      'Microsoft-Antimalware-Scan-Interface',
      'Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal',
      'Microsoft-Windows-TabletPC-Platform-Input-Ninput',
      'Microsoft-Windows-Security-EnterpriseData-FileRevocationManager',
      'Microsoft-Windows-TZUtil',
      'Microsoft-Windows-OOBE-FirstLogonAnim',
      'Microsoft-Windows-Direct3DShaderCache',
      'Microsoft-Windows-StartLmhosts',
      'Microsoft-Windows-Mobile-Broadband-Experience-Api',
      'Microsoft-Windows-DriverFrameworks-UserMode',
      'Microsoft-Windows-WindowsToGo-StartupOptions',
      'Microsoft-Windows-AllJoyn',
      'Microsoft-Windows-NDIS-PacketCapture',
      'Microsoft-Windows-TCPIP',
      'Microsoft-WindowsPhone-ConfigManager2',
      'Microsoft-Windows-Dism-Cli',
      'Microsoft-Windows-TabletPC-Platform-Manipulations',
      'Microsoft-Windows-Kernel-WDI',
      'Microsoft-Windows-Shell-Core',
      'Microsoft-Windows-User-Diagnostic',
      'Microsoft-Windows-Power-Meter-Polling',
      'Microsoft-Windows-USB-USBXHCI',
      'Microsoft-Windows-WMVENCOD',
      'Microsoft-Windows-NCSI',
      'Microsoft-Windows-WPD-API',
      'Microsoft-Windows-Immersive-Shell',
      'Microsoft-Windows-User-ControlPanel',
      'Microsoft-Windows-IME-JPAPI',
      'Microsoft-Windows-DesktopWindowManager-Diag',
      'Microsoft-Windows-SMBWitnessClient',
      'Microsoft-Windows-DisplayColorCalibration',
      'Microsoft-Windows-WLAN-MediaManager',
      'Microsoft-Windows-DesktopActivityModerator',
      'Microsoft-Windows-Kernel-Power',
      'Microsoft-Windows-BTH-BTHUSB',
      'Microsoft-Windows-System-Profile-HardwareId',
      'Microsoft-Windows-TZSync',
      'Microsoft-Windows-WPD-CompositeClassDriver',
      'Microsoft-Windows-SendTo',
      'Microsoft-Windows-EventLog-WMIProvider',
      'Microsoft-Windows-MMCSS',
      'Microsoft-Windows-CoreSystem-NetProvision-JoinProviderOnline',
      'Microsoft-Windows-Kernel-WSService-StartServiceTrigger',
      'Microsoft-Windows-EFS',
      'Microsoft-Windows-Performance-Recorder-Control',
      'Microsoft-Windows-Diagnostics-Networking',
      'Microsoft-Windows-USB-UCX',
      'Microsoft-Windows-MPS-CLNT',
      'Microsoft-Windows-MsLbfoSysEvtProvider',
      'Microsoft-Windows-RemoteDesktopServices-RemoteFX-Synth3dvsc',
      'Microsoft-Windows-TextPredictionEngine',
      'Microsoft-Windows-Mprddm',
      'Microsoft-Windows-Push-To-Install-Service',
      'Microsoft-Windows-International',
      'Microsoft-Windows-IME-JPPRED',
      'Microsoft-Windows-WebAuthN',
      'Microsoft-Windows-VPN-Client',
      'Microsoft-Windows-Security-IdentityListener',
      'Microsoft-Windows-AppID',
      'Microsoft-Windows-SmartScreen',
      'Microsoft-Windows-DirectShow-KernelSupport',
      'Microsoft-Windows-EapMethods-Sim',
      'Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider',
      'Microsoft-Windows-Fat-SQM',
      'Microsoft-Windows-Network-Connection-Broker',
      'Microsoft-Windows-AppXDeployment-Server',
      'Microsoft-Windows-TerminalServices-MediaRedirection',
      'Microsoft-Windows-WMPDMCUI',
      'Microsoft-Windows-Kerberos-Key-Distribution-Center',
      'Microsoft-Windows-Ntfs',
      'Microsoft-Windows-Security-UserConsentVerifier',
      'Microsoft-Windows-Diagnosis-Scheduled',
      'Microsoft-Windows-Partition',
      'Microsoft-Windows-UxInit',
      'Microsoft.Windows.ResourceManager',
      'Microsoft-OneCore-OnlineSetup',
      'Microsoft-Windows-Runtime-Web-Http',
      'Microsoft-Windows-TunnelDriver-SQM-Provider',
      'Microsoft-Windows-UxTheme',
      'Microsoft-Windows-StorageManagement-WSP-FS',
      'Microsoft-Windows-WinINet',
      'Microsoft-Windows-Crypto-DSSEnh',
      'Microsoft-Windows-Subsys-SMSS',
      'Microsoft-Windows-Compat-Appraiser',
      'Microsoft-Windows-Security-LessPrivilegedAppContainer',
      'Microsoft-Windows-WLGPA',
      'Microsoft-Windows-OverlayFilter',
      'Microsoft-Windows-ESE',
      'Microsoft-Windows-Serial-ClassExtension',
      'Application Popup',
      'Microsoft-Windows-DriverFrameworks-KernelMode-Performance',
      'Microsoft-Windows-exFAT-SQM',
      'Microsoft-Windows-Search-Core',
      'Microsoft-Windows-Storage-Tiering',
      'Microsoft-Windows-BranchCacheSMB',
      'Microsoft-Windows-Bluetooth-BthLEPrepairing',
      'Microsoft-Windows-WER-PayloadHealth',
      'Microsoft-Windows-MediaFoundation-MFReadWrite',
      'Microsoft-Windows-Diagnostics-LoggingChannel',
      'Microsoft-Windows-Program-Compatibility-Assistant',
      'Microsoft-Windows-Kernel-Tm',
      'Microsoft-WindowsPhone-LocationServiceProvider',
      'Microsoft-Windows-VIRTDISK',
      'Microsoft-Windows-PktMon',
      'Microsoft-Windows-TSF-UIManager',
      'Microsoft-Windows-AAD',
      'Microsoft-Windows-GenericRoaming',
      'Microsoft-Windows-TunnelDriver',
      'Microsoft-Windows-CodeIntegrity',
      'Microsoft-Windows-osk',
      'Microsoft-Windows-TSF-msctf',
      'Microsoft-Windows-Smartcard-Server',
      'Microsoft-Windows-WebIO',
      'Microsoft-Windows-SmbWmiProvider',
      'Microsoft-Windows-MPS-DRV',
      'Microsoft-Windows-DSC',
      'Microsoft-Windows-EDP-Audit-Regular',
      'Microsoft-Windows-ELS-Hyphenation',
      'Microsoft-Windows-SoftwareInventoryLogging-Provider',
      'Microsoft-Windows-BestPractices',
      'Microsoft-Windows-IE-SmartScreen',
      'Microsoft-Windows-Hyper-V-Hypervisor',
      'Microsoft-Windows-SetupPlatform',
      'Microsoft-Windows-XAML',
      'Microsoft-Windows-Kernel-Prefetch',
      'Microsoft-Windows-FunctionDiscoveryHost',
      'Microsoft-Windows-WinINet-Config',
      'Microsoft-Windows-DFSN-ServerFilter',
      'Microsoft-Windows-Kernel-Pep',
      'Microsoft-Windows-CertificateServicesClient-CertEnroll',
      'Microsoft-Windows-MPS-SRV',
      'Microsoft-Windows-Firewall-CPL',
      'Microsoft-Windows-BfeTriggerProvider',
      'Microsoft-Windows-Security-Auditing',
      'Microsoft-Windows-KernelStreaming',
      'Microsoft-Windows-EQoS',
      'Microsoft-Windows-Crypto-RNG',
      'Microsoft-Windows-Wordpad',
      'Microsoft-Windows-Winsock-NameResolution',
      'Service Control Manager',
      'Microsoft-Windows-GPIO-ClassExtension',
      'Microsoft-Windows-Minstore',
      'Microsoft-Windows-wmvdecod',
      'Microsoft-Windows-DeviceAssociationService',
      'Microsoft-Windows-UserDataAccess-UnifiedStore',
      'Microsoft-User Experience Virtualization-SQM Uploader',
      'Microsoft-JScript',
      'Microsoft-Windows-DirectManipulation',
      'Microsoft-Windows-HealthCenter',
      'Microsoft-Windows-EapMethods-RasChap',
      'Microsoft-Windows-StorageManagement-WSP-Host',
      'Microsoft-Windows-StorageSpaces-Driver',
      'Microsoft-Windows-Battery',
      'Microsoft-Windows-XAML-Diagnostics',
      'Microsoft-Windows-CredUI',
      'Microsoft-Windows-DomainJoinManagerTriggerProvider',
      'Microsoft-Windows-PackageStateRoaming',
      'Microsoft-Windows-CAPI2',
      'Microsoft-Windows-Network-DataUsage',
      'Microsoft-IEFRAME',
      'Microsoft-Windows-PushNotifications-Developer',
      'Microsoft-Windows-OtpCredentialProviderEvt',
      'Microsoft-Windows-Direct3D12',
      'Microsoft-Windows-TerminalServices-LocalSessionManager',
      'Microsoft-Windows-MSDTC 2',
      'Microsoft-Windows-ApplicationExperienceInfrastructure',
      'Microsoft-Windows-Immersive-Shell-API',
      'Microsoft-Windows-MemoryDiagnostics-Results',
      'Microsoft-Windows-ServiceReportingApi',
      'Microsoft-Windows-Shell-Search-UriHandler',
      'Microsoft-Windows-WMPNSS-PublicAPI',
      'WINSATAPI_ETW_PROVIDER',
      'Microsoft-User Experience Virtualization-Admin',
      'Microsoft-Windows-ThemeCPL',
      'Microsoft-Windows-NdisImPlatformSysEvtProvider',
      'Microsoft-Windows-NlaSvc',
      'Microsoft-Windows-HAL',
      'Microsoft-Windows-Shell-AuthUI',
      'Microsoft-Windows-Input-HIDCLASS',
      'Microsoft-Windows-UniversalTelemetryClient',
      'Microsoft-Windows-BackgroundTransfer-ContentPrefetcher',
      'Microsoft-Windows-Devices-Background',
      'Microsoft-Windows-ServiceTriggerPerfEventProvider',
      'Microsoft-Windows-Shell-DefaultPrograms',
      'Microsoft-Windows-Iphlpsvc-Trace',
      'Microsoft-Windows-Iphlpsvc',
      'Microsoft-Windows-ServerManager-DeploymentProvider',
      'Microsoft-Windows-WinNat',
      'Microsoft-Windows-ntshrui',
      'Microsoft-Windows-Wcmsvc',
      'Microsoft-Windows-BootUX',
      'Microsoft-Windows-VolumeSnapshot-Driver',
      'Microsoft-Windows-Forwarding',
      'Microsoft-Windows-StorageSpaces-SpaceManager',
      'Microsoft-Windows-DHCPv6-Client',
      'Microsoft-Windows-WMPNSS-Service',
      'Microsoft-Windows-Network-and-Sharing-Center',
      'Microsoft-Windows-RPC',
      'Microsoft-Windows-AIT',
      'Microsoft-Windows-DiskDiagnosticResolver',
      'Microsoft-Windows-Disk',
      'Microsoft-Windows-Fault-Tolerant-Heap',
      'Microsoft-Windows-QoS-qWAVE',
      'Microsoft-Windows-Diagnosis-DPS',
      'Microsoft-Windows-Runtime-WebAPI',
      'Microsoft-Windows-Security-SPP-UX',
      'Microsoft-Windows-RasSstp',
      'Microsoft-Windows-IdCtrls',
      'Microsoft-Windows-ApplicationExperience-Cache',
      'Microsoft-Windows-Shell-ConnectedAccountState',
      'Microsoft-Windows-ServerManager-ConfigureSMRemoting',
      'Microsoft-Windows-TerminalServices-ClientUSBDevices',
      'Microsoft-Windows-Runtime-Networking',
      'Microsoft-Windows-EapHost',
      'Microsoft-Windows-Display',
      'Microsoft-Windows-Wallet',
      'Microsoft-Windows-UserAccessLogging',
      'Microsoft-Windows-Kernel-Registry',
      'Microsoft-Windows-Video-For-Windows',
      'Microsoft-Windows-MSDTC',
      'Microsoft-Windows-DNS-Server-Service',
      'Microsoft-Windows-DirectoryServices-Deployment',
      'Microsoft-Windows-LanguagePackSetup',
      'Microsoft-Windows-ADSI',
      'Microsoft-Windows-DXP',
      'Microsoft-Windows-SPB-ClassExtension',
      'Microsoft-Windows-PerfProc',
      'Microsoft-Windows-CertificateServicesClient',
      'Microsoft-Windows-DevMgmt-UefiCsp',
      'Microsoft-Windows-IsolatedUserMode',
      'Microsoft-Windows-LimitsManagement',
      'Microsoft-Windows-MemoryDiagnostics-Schedule',
      'Microsoft-Windows-CloudStore',
      'Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-User-Mode-T...',
      'Microsoft-Windows-DateTimeControlPanel',
      'Microsoft-Windows-USB-USBHUB',
      'Microsoft-Windows-PrintService',
      'Microsoft-Windows-WindowsUIImmersive',
      'Microsoft-Windows-EaseOfAccess',
      'Microsoft-Windows-TSF-msutb',
      'Microsoft-Windows-ResourcePublication',
      'Microsoft-Windows-Speech-TTS',
      'Microsoft-Windows-DDisplay',
      'Microsoft-Antimalware-Service',
      'Microsoft-Windows-IME-KRAPI',
      'Microsoft-Windows-Dism-Api',
      'Microsoft-Windows-SetupUGC',
      'Microsoft-Windows-Audit',
      'Microsoft-Windows-CmiSetup',
      'Microsoft-Windows-Sysprep',
      'Microsoft-Windows-OobeLdr',
      'Microsoft-Windows-Setup',
      'Microsoft-Windows-Windeploy',
      'Microsoft-Windows-SetupCl',
      'Microsoft-Windows-Calculator',
      'Microsoft-Windows-Workplace Join',
      'Microsoft-Windows-PhotoAcq',
      'Microsoft-Windows-USB-MAUSBHOST',
      'Microsoft-Windows-WinMDE',
      'Microsoft-Windows-XWizards',
      'Microsoft-Windows-Usbstor',
      'Microsoft-Windows-D3D9',
      'Microsoft-Windows-NetworkStatus',
      'Microsoft-Windows-FileServices-ServerManager-EventProvider',
      'Microsoft-Windows-MSDTC Client',
      'Microsoft-Windows-Kernel-WHEA',
      'Microsoft-Windows-HttpEvent',
      'Microsoft-Windows-NetworkSecurity',
      'Microsoft-Windows-WMPNSSUI',
      'Microsoft-Windows-IME-CandidateUI',
      'Microsoft-Windows-Graphics-Capture-Server',
      'Microsoft-Windows-SoftwareRestrictionPolicies',
      'Microsoft-Windows-WinHttp',
      'Microsoft-Windows-TPM-WMI',
      'Microsoft-Windows-Folder Redirection',
      'Microsoft-Windows-Dwm-Redir',
      'Microsoft-Windows-DfsSvc',
      'Microsoft-Windows-Kernel-Network',
      'Microsoft-Windows-StorageManagement',
      'Microsoft-Windows-D3D10Level9',
      'Microsoft-Windows-DAL-Provider',
      'Microsoft-Windows-RemoteDesktopServices-RemoteFX-VM-Kernel-Mode...',
      'Microsoft-Windows-MP4SDECD',
      'Microsoft-Windows-PrintService-USBMon',
      'Microsoft-IE-JSDumpHeap',
      'Microsoft-Windows-ComDlg32',
      'Microsoft-Windows-PerfDisk',
      'Microsoft-Windows-ResetEng-Trace',
      'Microsoft-Windows-DxgKrnl',
      'Microsoft-Windows-AppXDeployment',
      'Microsoft-Windows-PushNotifications-InProc',
      'Microsoft-Windows-UIAutomationCore',
      'Microsoft-Windows-Narrator',
      'Microsoft-Windows-DUI',
      'Microsoft-Windows-UserDataAccess-CEMAPI',
      'Microsoft-Windows-SettingSync',
      'Microsoft-Windows-Networking-Correlation',
      'Microsoft-Windows-RTWorkQueue-Extended',
      'Microsoft-Windows-DUSER',
      'Microsoft-Windows-TabletPC-MathInput',
      'Microsoft-Windows-OLE-Perf',
      'Microsoft-Windows-Audit-CVE',
      'Microsoft-Windows-PerceptionSensorDataService',
      'Microsoft-Windows-NFC-ClassExtension',
      'Microsoft-Windows-L2NACP',
      'Microsoft-Windows-stobject',
      'Microsoft-Windows-ManagementTools-RegistryProvider',
      'Microsoft-Windows-ThemeUI',
      'Microsoft-Windows-MPEG2_DLNA-Encoder',
      'Microsoft-Office-Events',
      'Microsoft-Windows-UIRibbon',
      'Microsoft-Windows-StorageManagement-WSP-Spaces',
      'Microsoft-Windows-PushNotifications-Platform',
      'Microsoft-Windows-KdsSvc',
      'Microsoft-Windows-FileShareShadowCopyProvider',
      'Microsoft-Windows-KnownFolders',
      'Microsoft-Windows-StateRepository',
      'Microsoft-Windows-EventSystem',
      'Microsoft-Windows-CertificateServicesClient-CredentialRoaming',
      'Microsoft-Windows-User Profiles Service',
      'Microsoft-Windows-Crypto-DPAPI',
      'Microsoft-Windows-BTH-BTHPORT',
      'Microsoft-Windows-DirectSound',
      'Microsoft-Windows-Win32k',
      'Microsoft-Windows-PortableDeviceStatusProvider',
      'Microsoft-Windows-IME-JPTIP',
      'Microsoft-Windows-PrimaryNetworkIcon',
      'Microsoft-Windows-Ntfs-UBPM',
      'Microsoft-Antimalware-RTP',
      'Microsoft-Windows-Runtime-Media',
      'Microsoft-Windows-MediaEngine',
      'Microsoft-Windows-Heap-Snapshot',
      'Microsoft-Windows-HelloForBusiness',
      'Microsoft-Windows-QoS-Pacer',
      'Microsoft-Windows-Schannel-Events',
      'Microsoft-Windows-MobilityCenter',
      'Microsoft-Windows-Resource-Exhaustion-Resolver',
      'Microsoft-Windows-RadioManager',
      'Microsoft-Windows-PriResources-Deployment',
      'Microsoft-WindowsPhone-CoreMessaging',
      'Microsoft-Windows-Security-ExchangeActiveSyncProvisioning',
      'Microsoft-Windows-Base-Filtering-Engine-Resource-Flows',
      'Microsoft-Windows-EndpointTriggerProvider',
      'Microsoft-Windows-WPD-MTPBT',
      'Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider',
      'Microsoft-Windows-LUA',
      'Microsoft-Windows-WindowsUpdateClient',
      'Microsoft-Windows-propsys',
      'Microsoft-Windows-Kernel-Interrupt-Steering',
      'Microsoft-Windows-TerminalServices-Printers',
      'Microsoft-Windows-OfflineFiles',
      'Microsoft-Windows-HealthCenterCPL',
      'Microsoft-Windows-MSFTEDIT',
      'Microsoft-Windows-IndirectDisplays-ClassExtension-Events',
      'Microsoft-Windows-DirectShow-Core',
      'Microsoft-Windows-Kernel-BootDiagnostics',
      'Microsoft-Windows-UserPnp',
      'Microsoft-Windows-PerfCtrs',
      'NetJoin',
      'Microsoft-Windows-KPSSVC-WPP',
      'Microsoft-Windows-ShellCommon-StartLayoutPopulation',
      'Microsoft-Windows-EDP-AppLearning',
      'Microsoft-Windows-Media-Streaming',
      'Microsoft-Windows-SMBClient',
      'Microsoft-Windows-CertificationAuthorityClient-CertCli',
      'Microsoft-Windows-AppHost',
      'Microsoft-Windows-Security-Kerberos',
      'Microsoft-Windows-Storage-Tiering-IoHeat',
      'Microsoft-Windows-Superfetch',
      'Microsoft-Windows-Resource-Exhaustion-Detector',
      'Microsoft-Windows-UserDataAccess-PimIndexMaintenance',
      'Microsoft-Windows-NetworkManagerTriggerProvider',
      'Microsoft-Windows-CDROM',
      'Microsoft-Windows-Management-UI',
      'Microsoft-Windows-Direct3D10',
      'Microsoft-Windows-Direct3D10_1',
      'Microsoft-Windows-Kernel-PnP',
      'Microsoft-Windows-Store',
      'Microsoft-Windows-EapMethods-RasTls',
      'Microsoft-AppV-ServiceLog',
      'Microsoft-Windows-Winsrv',
      'Microsoft-Windows-FunctionDiscovery',
      'Microsoft-Windows-IdleTriggerProvider',
      'Microsoft-Windows-Sensors-Core-Performance',
      'Microsoft-Windows-WebcamExperience',
      'Microsoft-Windows-MF-FrameServer',
      'Microsoft-IE',
      'Microsoft-Windows-Dwm-Core',
      'Microsoft-Windows-PowerCfg',
      'Microsoft-Windows-SCPNP',
      'Microsoft-Windows-Volume',
      'Microsoft-Windows-SettingSync-Azure',
      'Microsoft-Windows-DriverFrameworks-UserMode-Performance',
      'Microsoft-Windows-Kernel-LicensingSqm',
      'Microsoft-WindowsPhone-CoreUIComponents',
      'Microsoft-Windows-PowerShell',
      'Microsoft-Windows-Biometrics',
      'Microsoft-Windows-Kernel-IoTrace',
      'Microsoft-Windows-Network-Setup',
      'Microsoft-Office-Word3',
      'Microsoft-Windows-Dwm-Udwm',
      'Microsoft-Windows-FileInfoMinifilter',
      'Microsoft-Windows-Shell-LockScreenContent',
      'Microsoft-Windows-CoreWindow',
      'Microsoft-Windows-PortableDeviceSyncProvider',
      'Microsoft-Windows-MediaFoundation-MSVProc',
      'Microsoft-Windows-ResetEng',
      'Microsoft-Windows-Diagnosis-MSDE',
      'Microsoft-Windows-SetupQueue',
      'Microsoft-Windows-DotNETRuntimeRundown',
      'Microsoft-Windows-NetworkBridge',
      'Microsoft-Windows-IPNAT',
      'Microsoft-Windows-Kernel-General',
      'Microsoft-Windows-Kernel-StoreMgr',
      'Microsoft-Windows-PDC',
      'Microsoft-Windows-SharedAccess_NAT',
      'Microsoft-Windows-WinINet-Capture',
      'Microsoft-Windows-MF',
      'Microsoft-Windows-WinRM',
      'Microsoft-Windows-PersistentMemory-Nvdimm',
      'Microsoft-Windows-TabletPC-InputPersonalization',
      'Microsoft-Windows-FailoverClustering-Client',
      'Application-Addon-Event-Provider',
      'Microsoft-Windows-WinRT-Error',
      'Microsoft-Windows-MUI',
      'Microsoft-Windows-Kernel-PowerTrigger',
      'Microsoft-Windows-EnhancedStorage-EhStorTcgDrv',
      'Microsoft-Windows-StorageSpaces-ManagementAgent',
      'Microsoft-Windows-Diagnosis-PCW',
      'Microsoft-Windows-SmartCard-DeviceEnum',
      'Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDown...',
      'Microsoft-Windows-OneX',
      'Microsoft-Windows-WER-SystemErrorReporting',
      'Microsoft-Windows-Kernel-IO',
      'Microsoft-Windows-NTLM',
      'Microsoft-Windows-USB-USBHUB3',
      'Microsoft-Windows-WPDClassInstaller',
      'Microsoft-Windows-WER-Diag',
      'Microsoft-Windows-PerceptionRuntime',
      'Microsoft-Windows-Audio',
      'Microsoft-Windows-MSMPEG2VDEC',
      'Microsoft-Windows-GroupPolicy',
      'Microsoft-Windows-Containers-Wcifs',
      'Microsoft-Windows-Smartcard-Trigger',
      'Microsoft-Windows-Netshell',
      'Microsoft-Windows-Hyper-V-ComputeLib',
      'Microsoft-Windows-CertPolEng',
      'Microsoft-Windows-Sdstor',
      'Microsoft-Windows-User-Loader',
      'User32',
      'Microsoft-Windows-StorageManagement-WSP-Health',
      'Microsoft-Windows-PowerCpl',
      'Microsoft-Windows-MediaFoundation-Performance-Core',
      'Microsoft-PerfTrack-IEFRAME',
      'Microsoft-Windows-CertificateServices-Deployment',
      'Microsoft-Windows-SpellChecker',
      'Microsoft-Windows-Kernel-PnP-Rundown',
      'Microsoft-Windows-WWAN-NDISUIO-EVENTS',
      'Microsoft-Windows-mobsync',
      'Microsoft-Windows-Ras-AgileVpn',
      'Microsoft-Windows-TabletPC-Platform-Input-Core',
      'Microsoft-Windows-MediaFoundation-PlayAPI',
      'Microsoft-Windows-Kernel-EventTracing',
      'Microsoft-Windows-SystemEventsBroker',
      'Microsoft-Windows-DFSN-Server',
      'Microsoft-Client-Licensing-Platform',
      'Microsoft-Windows-SenseIR',
      'Microsoft-Windows-MsLbfoEventProvider',
      'Microsoft-Windows-MediaFoundation-MFCaptureEngine',
      'Microsoft-Windows-COM-Perf',
      'Microsoft-Windows-Wired-AutoConfig',
      'Microsoft-Windows-Data-Pdf',
      'Microsoft-Windows-EventCollector',
      'Microsoft-Windows-Containers-Wcnfs',
      'Microsoft-Windows-UserDataAccess-UserDataApis',
      'Microsoft-Windows-Runtime-Networking-BackgroundTransfer',
      'Microsoft-Windows-Deplorch',
      'Microsoft-Windows-CorruptedFileRecovery-Client',
      'Microsoft-Windows-Hyper-V-Guest-Drivers-Dynamic-Memory',
      'Microsoft-Windows-AppxPackagingOM',
      'Microsoft-Windows-Memory-Diagnostic-Task-Handler',
      'Microsoft-Office-Word2',
      'Microsoft-Windows-PlayToManager',
      'Microsoft-Windows-InputSwitch',
      'Microsoft-Windows-Security-SPP-UX-GC',
      'Microsoft-Windows-CertificateServicesClient-Lifecycle-System',
      'Microsoft-Windows-MediaFoundation-Platform',
      'Microsoft-Windows-Servicing',
      'Microsoft-Windows-GroupPolicyTriggerProvider',
      'Microsoft-Windows-Directory-Services-SAM-Utility',
      'Microsoft-Windows-TabletPC-MathRecognizer',
      'Microsoft-Windows-IME-TIP',
      'Microsoft-Windows-Photo-Image-Codec',
      'Microsoft-Windows-Sens',
      'Microsoft-Windows-NetworkGCW',
      'Microsoft-Windows-Graphics-Printing3D',
      'Microsoft-Windows-CertificateServicesClient-Lifecycle-User',
      'Microsoft-Windows-Kernel-LiveDump',
      'Microsoft-Windows-UI-Input-Inking',
      'Microsoft-Windows-COMRuntime',
      'Microsoft-Windows-AppModel-State',
      'Microsoft-Windows-UAC-FileVirtualization',
      'Microsoft-Windows-PersistentMemory-ScmBus',
      'Microsoft-Windows-Hyper-V-Guest-Drivers-IcSvc',
      'Microsoft-Windows-FederationServices-Deployment',
      'Microsoft-Pef-WFP-MessageProvider',
      'Microsoft-Windows-WHEA-Logger',
      'Microsoft-Windows-ServerManager-ManagementProvider',
      'Microsoft-Windows-TabletPC-CoreInkRecognition',
      'Microsoft-Windows-WPD-MTPIP',
      'Microsoft-Windows-EnrollmentWebService',
      'Microsoft-Windows-HttpLog',
      'Microsoft-Windows-DirectComposition',
      'Microsoft-Windows-StorPort',
      'OpenSSH',
      'Microsoft-Windows-Security-SPP-UX-Notifications',
      'Microsoft-Windows-Kernel-Acpi',
      'Microsoft-Windows-Application Server-Applications',
      'Microsoft-Windows-International-RegionalOptionsControlPanel',
      'Microsoft-Windows-TerminalServices-RemoteConnectionManager',
      'Microsoft-Windows-Kernel-Disk',
      'Microsoft-Windows-Crypto-BCrypt',
      'Microsoft-Windows-WinML',
      'Microsoft-Windows-Magnification',
      'Microsoft-Windows-USB-USBPORT',
      'Microsoft-Windows-Documents',
      'Microsoft-Windows-StartupRepair',
      'Microsoft-Windows-IPSEC-SRV',
      'Microsoft-Windows-DXGI',
      'Microsoft-Windows-Search',
      'Microsoft-Windows-PerfNet',
      'Volsnap',
      'Microsoft-Windows-LanGPA',
      'Microsoft-Windows-ATAPort',
      'Microsoft-Windows-Processor-Aggregator',
      'Microsoft-Windows-Websocket-Protocol-Component',
      'Microsoft-Windows-AppLocker',
      'Microsoft-Windows-Tethering-Manager',
      'Error Instrument',
      'Microsoft-Windows-ReFS',
      'Microsoft-Windows-Power-Troubleshooter',
      'Microsoft-Windows-NDIS',
      'Microsoft-Windows-Kernel-Tm-Trigger',
      'Microsoft-Windows-UserModePowerService',
      'Microsoft-Windows-PrintBRM',
      'Microsoft-Windows-DCLocator',
      'Microsoft-Antimalware-AMFilter',
      'Microsoft-Windows-Time-Service-PTP-Provider',
      'Microsoft-Windows-AppIDServiceTrigger',
      'Microsoft-Windows-Spell-Checking',
      'Microsoft-Windows-msmpeg2venc',
      'Microsoft-Windows-IE-F12-Provider',
      'Microsoft-Windows-Windows Firewall With Advanced Security',
      'Microsoft-Windows-Kernel-Memory',
      'Microsoft-Windows-UserDataAccess-UserDataUtils',
      'Microsoft-Windows-Media-Protection-PlayReady-Performance',
      'Microsoft-Windows-Dwm-Dwm',
      'Microsoft-Windows-All-User-Install-Agent',
      'Microsoft-Windows-SleepStudy',
      'Intel-iaLPSS-GPIO',
      'Microsoft-Windows-DLNA-Namespace',
      'Microsoft-Windows-Build-RegDll',
      'Microsoft-Windows-Kerberos-KdcProxy',
      'Microsoft-Windows-COM',
      'Microsoft-Windows-SMBServer',
      'Microsoft-Windows-ProcessStateManager',
      'Intel-iaLPSS-I2C',
      'Microsoft-Windows-IME-TCTIP',
      'Microsoft-Windows-WindowsColorSystem',
      'Microsoft-Windows-Winsock-WS2HELP',
      'Microsoft-Windows-WEPHOSTSVC',
      'Microsoft-Windows-CorruptedFileRecovery-Server',
      'Microsoft-Windows-EapMethods-Ttls',
      'Microsoft-Windows-Ras-NdisWanPacketCapture',
      'Microsoft-Windows-Sensors',
      'Microsoft-Windows-UI-Search',
      'Microsoft-Windows-RPCSS',
      'Microsoft-Windows-ServerManager-MultiMachine',
      'Microsoft-Windows-ASN1',
      'Microsoft-Windows-Search-ProtocolHandlers',
      'Microsoft-Windows-AxInstallService',
      'Microsoft-Office-Word',
      'Microsoft-Windows-User Profiles General',
      'Microsoft-Windows-Bluetooth-Bthmini',
      'Microsoft-Windows-SMBDirect',
      'Microsoft-Windows-WebAuth',
      'Microsoft-Windows-Direct3D11',
      'Microsoft-Windows-IME-JPLMP',
      'Microsoft-Windows-Winlogon',
      'Microsoft-Windows-TerminalServices-ServerUSBDevices',
      'Microsoft-Windows-LinkLayerDiscoveryProtocol',
      'Microsoft-Windows-WPD-MTPUS',
      'Microsoft-Windows-DirectAccess-MediaManager',
      'Microsoft-Windows-HttpService',
      'Ntfs',
      'Microsoft-Windows-AuthenticationProvider',
      'Microsoft-User Experience Virtualization-Agent Driver',
      'Microsoft-Windows-Help',
      'Microsoft-Windows-TaskScheduler',
      'Microsoft-Windows-FMS',
      'Microsoft-Windows-DeviceUx',
      'Microsoft-Windows-PDFReader',
      'Microsoft-Windows-IME-KRTIP',
      'Microsoft-Windows-Diagnosis-WDI',
      'Microsoft-Windows-Kernel-Audit-API-Calls',
      'Microsoft-Windows-WebServices',
      'Microsoft-Windows-UIAnimation',
      'Microsoft-Windows-Install-Agent',
      'Microsoft-Windows-DiskDiagnosticDataCollector',
      'Microsoft-Windows-DotNETRuntime',
      'Microsoft-Windows-GPIOButtons',
      'Microsoft-Windows-RTWorkQueue-Threading',
      'Microsoft-Windows-DVD',
      'Microsoft-Windows-Diagnosis-Scripted',
      'Microsoft-Windows-IME-CustomerFeedbackManager',
      'Microsoft-Windows-Security-SPP',
      'Microsoft-Windows-VHDMP',
      'Microsoft-Windows-IME-Broker',
      'Microsoft-Windows-Defrag-Core',
      'Microsoft-Windows-MountMgr',
      'Microsoft-Windows-Crypto-CNG',
      'Microsoft-Windows-UI-Shell',
      'Microsoft-Windows-VDRVROOT',
      'Microsoft-Windows-Feedback-Service-TriggerProvider',
      'Microsoft-Antimalware-Protection',
      'Microsoft-Windows-Diagnosis-PLA',
      'Microsoft-AppV-Client',
      'Microsoft-Windows-Winsock-AFD',
      'Microsoft-Windows-Firewall',
      'Microsoft-Windows-TabletPC-Platform-Input-Wisp',
      'Microsoft-Windows-Security-Netlogon',
      'Microsoft-Windows Networking VPN Plugin Platform',
      'Microsoft-Windows-ReadyBoost',
      'Microsoft-Windows-DiskDiagnostic',
      'Microsoft-Windows-BrokerInfrastructure',
      'Microsoft-Windows-Security-Vault',
      'Microsoft-Windows-UAC',
      'Microsoft-Windows-Graphics-Printing',
      'Microsoft-Windows-Subsys-Csr',
      'Microsoft-Windows-Thermal-Polling',
      'Microsoft-Windows-Crypto-NCrypt',
      'Microsoft-Windows-DeviceUpdateAgent',
      'Microsoft-Windows-TabletPC-InputPanel',
      'Microsoft-WindowsPhone-Ufx',
      'Microsoft-Windows-Security-Adminless',
      'Microsoft-Windows-ACL-UI',
      'Microsoft-Windows-SecurityMitigationsBroker',
      'Microsoft-Windows-AppModel-Exec',
      'Microsoft-Windows-DNSServer',
      'Microsoft-Windows-OOBE-Machine-Core',
      'Microsoft-Windows-Crashdump',
      'Microsoft-Windows-Kernel-File',
      'Microsoft-Windows-Serial-ClassExtension-V2',
      'Microsoft-Windows-Application-Experience',
      'Microsoft-Windows-Bits-Client',
      'Microsoft-Windows-Kernel-XDV',
      'Microsoft-Windows-AppReadiness',
      'Microsoft-Windows-CertificateServicesClient-AutoEnrollment',
      'Microsoft-Windows-DeviceManagement-Pushrouter',
      'Microsoft-Windows-RemoteDesktopServices-SessionServices',
      'Microsoft-Windows-AppModel-Runtime',
      'Microsoft-Windows-TriggerEmulatorProvider',
      'Microsoft-Windows-Diagnosis-PerfHost',
      'Microsoft-Windows-MPRMSG',
      'Microsoft-Windows-Hyper-V-Guest-Drivers-Vmbus',
      'Microsoft-Windows-Dot3MM',
      'Microsoft-Windows-FilterManager',
      'Microsoft-Windows-WMP',
      'Microsoft-Windows-VerifyHardwareSecurity',
      'Microsoft-Windows-MediaFoundation-Performance',
      'Microsoft-Windows-SettingSync-OneDrive',
      'Microsoft-Windows-RPC-Events',
      'Microsoft-Windows-Threat-Intelligence',
      'OfficeLoggingLiblet',
      'Microsoft-Windows-Http-SQM-Provider',
      'Microsoft-Windows-Kernel-Licensing-StartServiceTrigger',
      'OfficeAirSpace',
      'Microsoft-Windows-UserDataAccess-CallHistoryClient',
      'Microsoft-Windows-StorDiag',
      'Microsoft-Windows-OOBE-Machine-DUI',
      'Microsoft-Windows-Shell-Shwebsvc',
      'Microsoft-Windows-EnrollmentPolicyWebService',
      'Microsoft-Windows-IME-TCCORE',
      'Microsoft-Windows-DeviceGuard',
      'Microsoft-Windows-PerfOS',
      'Microsoft-Windows-DeliveryOptimization',
      'Microsoft-Windows-RPC-FirewallManager',
      'Microsoft-Windows-Runtime-Graphics',
      'Microsoft-Windows-Mobile-Broadband-Experience-SmsRouter',
      'Microsoft-Windows-Security-Mitigations',
      'Microsoft-Windows-SENSE',
      'Microsoft-Windows-UserDataAccess-UserDataService',
      'Microsoft-AppV-SharedPerformance',
      'Microsoft-Windows-Rdms-UI',
      'Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging',
      'Microsoft-Windows-SystemSettingsHandlers',
      'Microsoft-Windows-NetworkProfile',
      'Microsoft-Windows-NetworkProfileTriggerProvider',
      'Microsoft-Windows-FirstUX-PerfInstrumentation',
      'Microsoft-Windows-NDF-HelperClassDiscovery',
      'Microsoft-Windows-Containers-BindFlt',
      'Microsoft-Windows-Eventlog',
      'Microsoft-Windows-Search-ProfileNotify',
      'Microsoft-Windows-DeviceSetupManager',
      'Microsoft-Windows-IME-OEDCompiler',
      'Microsoft-Windows-ProcessExitMonitor',
      'Microsoft-Windows-Sdbus',
      'Microsoft-Windows-ManagementTools-TaskManagerProvider',
      'Windows-ApplicationModel-Store-SDK',
      'Microsoft-PerfTrack-MSHTML'
  ]
  
  from .windowseventdata import WindowsEventData
  from .windowseventsystem import WindowsEventSystem
  from .markdowntable import MarkdownTable
  from .downloadwindowseventdata import DownloadWindowsEventData
  from .computer import Computer
  import glob, os, fnmatch, re
  import xmltodict, random
  from io import StringIO
  from bs4 import BeautifulSoup
  
  
  class WindowsEventLog(object):
  
      __DATA_PATH = os.path.abspath(os.path.join(os.path.dirname(__file__), 'data', 'windows-event'))
      __PROVIDER_LIST = os.path.abspath(os.path.join(os.path.dirname(__file__), 'data', 'windows-providers' + '.txt'))
  
      def __init__(self, json=False):
          self.file_directory = self.__check_for_event_data_cache()
          self.json = json
          self._get_windows_providers()
  
      def get(self, count=1, computer_name=None, os_version='Windows'):
          return_list = []
          os_version = self.__check_os_type(os_version)
          if not computer_name:
              computer_name = Computer().name
          
          md_count = 0
          shuffled = shuffled = random.sample(self.file_directory, len(self.file_directory))
          for md_file in shuffled:
              if md_count == count:
                  break
              self.soup = BeautifulSoup(features='xml')
              self.soup.append(self.soup.new_tag("Event"))
              self.markdown = MarkdownTable(md_file)
              
              system = WindowsEventSystem(
                      random.choice(self.provider_list),
                      md_file.rsplit('/', 1)[1].split('-')[1].strip('.md'),
                      os_version,
                      computer_name
                  )
              self.soup.Event.append(self.soup.new_tag('System'))
              self.soup.Event.System.append(system.get)
              
              data = WindowsEventData()
              for rows in self.markdown.rows():
                  if rows and 'Sample Value' in rows:
                      data.add(rows['Field Name'], ' ' if 'Sample Value' not in rows else rows['Sample Value'])
  
              self.soup.Event.append(self.soup.new_tag('EventData'))
              self.soup.Event.EventData.append(data.get)
              
              if self.json:
                  soup_string = self.soup.prettify()
                  return_dict = xmltodict.parse(soup_string.strip())
                  return_list.append(return_dict)
              else:
                  return_list.append(self.soup.prettify())
              md_count += 1
          return return_list
  
      def _get_windows_providers(self):
          self.provider_list = []
          f = open(self.__PROVIDER_LIST, 'r')
          for x in f:
              self.provider_list.append(x.strip())
  
      def __check_os_type(self, os_version):
          if os_version in ['Windows Server 2008', 'Windows Vista']:
              return '0'
          elif os_version in ['Windows Server 2012 R2', 'Windows 8.1']:
              return '1'
          elif os_version in ['Windows 10']:
              return '2'
          else:
              return str(random.randint(0,2))
  
      def __check_for_event_data_cache(self):
          markdown_files = self.__check_file_directory()
          if not markdown_files:
              DownloadWindowsEventData().save()
              markdown_files = self.__check_file_directory()
          
          return markdown_files
  
      def __check_file_directory(self):
          matches = []
          for root, dirnames, filenames in os.walk(self.__DATA_PATH):
              for filename in fnmatch.filter(filenames, '*.md'):
                  matches.append(os.path.abspath(os.path.join(root, filename)))
          return matches