Mystery Incorporated
osqueryi.exe --windows_event_channels=System,Application,Setup,Security --disable_events=false