CommandLine:Win32_NTEventlogFile* (CommandLine:.BackupEventlog\(* OR CommandLine:.ChangeSecurityPermissions\(* OR CommandLine:.ChangeSecurityPermissionsEx\(* OR CommandLine:.ClearEventLog\(* OR CommandLine:.Delete\(* OR CommandLine:.DeleteEx\(* OR CommandLine:.Rename\(* OR CommandLine:.TakeOwnerShip\(* OR CommandLine:.TakeOwnerShipEx\(*)