NTLM" />
        <string id="task_CATEGORY_AUDITNTLM" value="Auditing NTLM" />
        <string id="task_CATEGORY_MAX_CATEGORY" value="Max" />
        <string id="eventProviderName" value="Microsoft-Windows-NTLM" />
        <string id="NTLMChannelName" value="Microsoft-Windows-NTLM/Operational" />
        <string id="NTLMClientBlocked" value="NTLM client blocked: Outgoing NTLM authentication traffic to remote servers that is blocked.%nTarget server: %1%nSupplied user: %2%nSupplied domain: %3%nPID of client process: %4%nName of client process: %5%nLUID of client process: %6%nUser identity of client process: %7%nDomain name of user identity of client process: %8%nMechanism OID: %9%n%nNT