true <QueryList><Query Id="0" Path="Application"><Select Path="Application"> *[System[Provider[@Name='Application Error'] and (Level=2) and (EventID=1000)]] and *[EventData[Data and (Data='Meta Quest Remote Desktop.exe')]] </Select></Query></QueryList> PT1S InteractiveToken LeastPrivilege HFENDULEAM\decid IgnoreNew false true false true false true false true true false false false PT0S 7 "C:\Program Files\Meta Quest Remote Desktop\Scripts\..\Meta Quest Remote Desktop.exe" \MQRD