| source | Count | | sum | 81 |
| Service Control Manager | 28 |
| EventLog | 18 |
| RemoteAccess | 13 |
| Application Popup | 11 |
| Srv | 11 |
| source | Count | | sum | 70 |
| Service Control Manager | 24 |
| EventLog | 16 |
| Srv | 10 |
| RemoteAccess | 6 |
| Application Popup | 6 |
| Print | 5 |
| Tcpip | 2 |
| BROWSER | 1 |
| source | Count | | sum | 65 |
| Service Control Manager | 26 |
| EventLog | 15 |
| Srv | 12 |
| RemoteAccess | 6 |
| Application Popup | 6 |
| source | Count | | sum | 58 |
| Print | 25 |
| Service Control Manager | 12 |
| EventLog | 10 |
| RemoteAccess | 4 |
| Srv | 4 |
| Application Popup | 3 |
| source | Count | | sum | 58 |
| Service Control Manager | 16 |
| EventLog | 13 |
| Print | 10 |
| RemoteAccess | 9 |
| Srv | 6 |
| Application Popup | 4 |
| source | Count | | sum | 51 |
| Service Control Manager | 23 |
| EventLog | 15 |
| Application Popup | 6 |
| Srv | 5 |
| RemoteAccess | 2 |
| source | Count | | sum | 41 |
| Service Control Manager | 15 |
| EventLog | 9 |
| Application Popup | 6 |
| Srv | 6 |
| RemoteAccess | 3 |
| Print | 2 |
| source | Count | | sum | 37 |
| Service Control Manager | 12 |
| EventLog | 8 |
| Print | 6 |
| RemoteAccess | 4 |
| Srv | 4 |
| Application Popup | 3 |
| source | Count | | sum | 34 |
| EventLog | 9 |
| Service Control Manager | 8 |
| Print | 7 |
| RemoteAccess | 4 |
| Srv | 4 |
| Application Popup | 2 |
| source | Count | | sum | 26 |
| Service Control Manager | 8 |
| EventLog | 5 |
| Print | 4 |
| Srv | 4 |
| RemoteAccess | 3 |
| Application Popup | 2 |
| source | Count | | sum | 21 |
| RemoteAccess | 7 |
| EventLog | 6 |
| Service Control Manager | 4 |
| Srv | 2 |
| Print | 1 |
| Application Popup | 1 |
| source | Count | | sum | 21 |
| Print | 17 |
| RemoteAccess | 2 |
| Srv | 2 |
| source | Count | | sum | 19 |
| Service Control Manager | 8 |
| EventLog | 5 |
| Srv | 4 |
| Application Popup | 2 |
| source | Count | | sum | 18 |
| Service Control Manager | 8 |
| EventLog | 5 |
| Application Popup | 2 |
| Srv | 2 |
| RemoteAccess | 1 |
| source | Count | | sum | 15 |
| Print | 6 |
| Service Control Manager | 4 |
| EventLog | 3 |
| RemoteAccess | 1 |
| Application Popup | 1 |
| source | Count | | sum | 9 |
| EventLog | 4 |
| RemoteAccess | 4 |
| Srv | 1 |
| source | Count | | sum | 6 |
| Print | 3 |
| Srv | 2 |
| RemoteAccess | 1 |
| source | Count | | sum | 3 |
| EventLog | 2 |
| Service Control Manager | 1 |