- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Display" /> 
  <EventID Qualifiers="0">4101</EventID> 
  <Level>3</Level> 
  <Task>0</Task> 
  <Keywords>0x80000000000000</Keywords> 
  <TimeCreated SystemTime="2015-07-12T15:14:58.000000000Z" /> 
  <EventRecordID>40950</EventRecordID> 
  <Channel>System</Channel> 
  <Computer>xxxxx</Computer> 
  <Security /> 
  </System>
- <EventData>
  <Data>amdkmdap</Data> 
  <Data /> 
  </EventData>
  </Event>