Hyena v9.0 'D'

I have a Windows 2008 R2 server that is running Microsoft Event Collection Service. It populates log Events/ForwardedEvents....