(EventID:5145 ShareName:\\\\\*\\IPC$) (-(RelativeTargetName:atsvc OR RelativeTargetName:samr OR RelativeTargetName:lsarpc OR RelativeTargetName:lsass OR RelativeTargetName:winreg OR RelativeTargetName:netlogon OR RelativeTargetName:srvsvc OR RelativeTargetName:protected_storage OR RelativeTargetName:wkssvc OR RelativeTargetName:browser OR RelativeTargetName:netdfs OR RelativeTargetName:svcctl OR RelativeTargetName:spoolss OR RelativeTargetName:ntsvcs OR RelativeTargetName:LSM_API_service OR RelativeTargetName:HydraLsPipe OR RelativeTargetName:TermSrv_API_service OR RelativeTargetName:MsFteWds OR RelativeTargetName:sql\\query OR RelativeTargetName:eventlog))