TargetFilename:C\:\\Windows\\System32\\config* (TargetFilename:\\Hotfixinfo.txt OR TargetFilename:\\netiostate.txt OR TargetFilename:\\sysportslog.txt OR TargetFilename:\\VmSwitchLog.evtx)