K37CsoFpcBzs5PYa6h1vtGJR++ND5SS89EkEYNHF1Nc= 1.0 \Microsoft\Windows\PLA\System\ConvertLogEntries O:SYD:P(A;;FA;;;BA)(A;;FA;;;SY) true <QueryList><Query Id="0" Path="Microsoft-Windows-TaskScheduler/Operational"><Select Path="Microsoft-Windows-TaskScheduler/Operational">*[EventData[@Name='TaskStartFailedEvent']/Data[@Name='TaskName']!='\Microsoft\Windows\PLA\System\ConvertLogEntries']</Select></Query></QueryList> 2001-01-01T00:00:00 2001-01-01T00:00:01 S-1-5-19 true false true Queue false true false false PT0S false false true true false false PT0S 7 %windir%\system32\rundll32.exe %windir%\system32\pla.dll