(EventID:4656 OR EventID:4663) ProcessName:\\OUTLOOK.EXE (ObjectName:\\REGISTRY\\MACHINE\\SYSTEM* ObjectName:Services\\*) (ObjectName:WebClient\\NetworkProvider OR ObjectName:LanmanWorkstation\\NetworkProvider) AccessList:%%4416*