Dell Change Auditor

ChangeAuditor :: 6.6.0.0 (Management Pack)

Dell Change Auditor Management Pack

• Show Management Pack XML
• Get Management Pack data in Excel format
• Download: ChangeAuditor.xml

Management Pack Elements

Classes (1)

	DisplayName	ID	Base Class	Abstract	Hosted	Singleton	Group	Extension	Accessibility
	Dell Change Auditor Installation	ChangeAuditor.Quest_ChangeAuditor_Installation	Microsoft.Windows.LocalApplication	False	True	False	False	False	Public

Discoveries (1)

	DisplayName	ID	Target	Enabled
	Discovery rule that populates the Dell Change Auditor Managed Group	ChangeAuditor.Quest_ChangeAuditor_Installation.Discovery	Microsoft.Windows.Server.Computer	True

Unit Monitors (1)

	DisplayName	ID	Target	Category	Enabled	Alert Generate	Accessibility
	Coordinator Service Monitor	ChangeAuditor.Monitor	ChangeAuditor.Quest_ChangeAuditor_Installation	AvailabilityHealth	True	False	Public

Rules (3952)

	DisplayName	ID	Target	Category	Enabled	Alert Generate
	CA Event: Accepted Domain Definition Added To Hub Transport Configuration	CA_Event__Accepted_Domain_Definition_Added_To_Hub_Transport_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accepted Domain Definition Removed From Hub Transport Configuration	CA_Event__Accepted_Domain_Definition_Removed_From_Hub_Transport_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accepted Domain Definition Renamed	CA_Event__Accepted_Domain_Definition_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accept Messages Except From list changed for group	CA_Event__Accept_Messages_Except_From_list_changed_for_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accept Messages Except From list changed for user	CA_Event__Accept_Messages_Except_From_list_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accept Messages Only From list changed for group	CA_Event__Accept_Messages_Only_From_list_changed_for_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accept Messages Only From list changed for user	CA_Event__Accept_Messages_Only_From_list_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Access Credential Manager as a trusted caller	CA_Event__Access_Credential_Manager_as_a_trusted_caller_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Access This Computer From The Network policy changed	CA_Event__Access_This_Computer_From_The_Network_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accounts: Administrator Account Status policy changed	CA_Event__Accounts__Administrator_Account_Status_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accounts: Guest Account Status policy changed	CA_Event__Accounts__Guest_Account_Status_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accounts: Limit Local Account Use Of Blank Passwords To Console Logon Only policy changed	CA_Event__Accounts__Limit_Local_Account_Use_Of_Blank_Passwords_To_Console_Logon_Only_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accounts: Rename Administrator Account policy changed	CA_Event__Accounts__Rename_Administrator_Account_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Accounts: Rename Guest Account policy changed	CA_Event__Accounts__Rename_Guest_Account_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account disabled for local user	CA_Event__Account_disabled_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account enabled for local user	CA_Event__Account_enabled_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account expiration changed for local user	CA_Event__Account_expiration_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Lockout Duration policy changed	CA_Event__Account_Lockout_Duration_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Lockout Threshold policy changed	CA_Event__Account_Lockout_Threshold_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Logon: Audit Credential Validation changed	CA_Event__Account_Logon__Audit_Credential_Validation_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Logon: Audit Kerberos Authentication Service changed	CA_Event__Account_Logon__Audit_Kerberos_Authentication_Service_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Logon: Audit Kerberos Service Ticket Operations changed	CA_Event__Account_Logon__Audit_Kerberos_Service_Ticket_Operations_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Logon: Audit Other Account Logon Events changed	CA_Event__Account_Logon__Audit_Other_Account_Logon_Events_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Management: Audit Application Group Management changed	CA_Event__Account_Management__Audit_Application_Group_Management_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Management: Audit Computer Account Management changed	CA_Event__Account_Management__Audit_Computer_Account_Management_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Management: Audit Distribution Group Management changed	CA_Event__Account_Management__Audit_Distribution_Group_Management_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Management: Audit Other Account Management Events changed	CA_Event__Account_Management__Audit_Other_Account_Management_Events_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Management: Audit Security Group Management changed	CA_Event__Account_Management__Audit_Security_Group_Management_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Account Management: Audit User Account Management changed	CA_Event__Account_Management__Audit_User_Account_Management_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Added To Organization Client Access Configuration	CA_Event__ActiveSync_Mailbox_Policy_Added_To_Organization_Client_Access_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Allow Attachments To Be Downloaded Option Changed	CA_Event__ActiveSync_Mailbox_Policy_Allow_Attachments_To_Be_Downloaded_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Allow Non-Provisionable Devices Option Changed	CA_Event__ActiveSync_Mailbox_Policy_Allow_Non_Provisionable_Devices_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Allow Simple Password Option changed	CA_Event__ActiveSync_Mailbox_Policy_Allow_Simple_Password_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Enable Password Recovery Option changed	CA_Event__ActiveSync_Mailbox_Policy_Enable_Password_Recovery_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Maximum Attachment Size Changed	CA_Event__ActiveSync_Mailbox_Policy_Maximum_Attachment_Size_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Minimum Password Length changed	CA_Event__ActiveSync_Mailbox_Policy_Minimum_Password_Length_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Number of Failed Attempts Allowed changed	CA_Event__ActiveSync_Mailbox_Policy_Number_of_Failed_Attempts_Allowed_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Password Expiration changed	CA_Event__ActiveSync_Mailbox_Policy_Password_Expiration_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Password History changed	CA_Event__ActiveSync_Mailbox_Policy_Password_History_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Password Required Option changed	CA_Event__ActiveSync_Mailbox_Policy_Password_Required_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Refresh Interval changed	CA_Event__ActiveSync_Mailbox_Policy_Refresh_Interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Removed From Organization Client Access Configuration	CA_Event__ActiveSync_Mailbox_Policy_Removed_From_Organization_Client_Access_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Renamed	CA_Event__ActiveSync_Mailbox_Policy_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Require Alphanumeric Password Option changed	CA_Event__ActiveSync_Mailbox_Policy_Require_Alphanumeric_Password_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Require Encryption On Device changed	CA_Event__ActiveSync_Mailbox_Policy_Require_Encryption_On_Device_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Require Encryption On Device Option changed	CA_Event__ActiveSync_Mailbox_Policy_Require_Encryption_On_Device_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy User Idle Timeout changed	CA_Event__ActiveSync_Mailbox_Policy_User_Idle_Timeout_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Windows File Shares Access Option changed	CA_Event__ActiveSync_Mailbox_Policy_Windows_File_Shares_Access_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Mailbox Policy Windows SharePoint Services Access Option changed	CA_Event__ActiveSync_Mailbox_Policy_Windows_SharePoint_Services_Access_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Web Site External URL Changed on Server	CA_Event__ActiveSync_Web_Site_External_URL_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ActiveSync Web Site Internal URL Changed on Server	CA_Event__ActiveSync_Web_Site_Internal_URL_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory Object - Access Rights Changed	CA_Event__Active_Directory_Object___Access_Rights_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory Object - Extended Rights Changed	CA_Event__Active_Directory_Object___Extended_Rights_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory Object - Owner Changed	CA_Event__Active_Directory_Object___Owner_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory protection template added	CA_Event__Active_Directory_protection_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory protection template changed	CA_Event__Active_Directory_protection_template_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory protection template disabled	CA_Event__Active_Directory_protection_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory protection template enabled	CA_Event__Active_Directory_protection_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory protection template removed	CA_Event__Active_Directory_protection_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory share added	CA_Event__Active_Directory_share_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Directory share removed	CA_Event__Active_Directory_share_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active session limit changed for local user	CA_Event__Active_session_limit_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Active Session Limit changed for user object	CA_Event__Active_Session_Limit_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Act As Part Of The Operating System policy changed	CA_Event__Act_As_Part_Of_The_Operating_System_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM Attribute severity changed	CA_Event__ADAM_Attribute_severity_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM monitoring point added	CA_Event__ADAM_monitoring_point_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM monitoring point removed	CA_Event__ADAM_monitoring_point_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM monitoring scope disabled	CA_Event__ADAM_monitoring_scope_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM monitoring scope enabled	CA_Event__ADAM_monitoring_scope_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM protection template added	CA_Event__ADAM_protection_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM protection template changed	CA_Event__ADAM_protection_template_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM protection template disabled	CA_Event__ADAM_protection_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM protection template enabled	CA_Event__ADAM_protection_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: ADAM protection template removed	CA_Event__ADAM_protection_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address Answer Limit changed	CA_Event__Address_Answer_Limit_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address Changed in UM IP Gateway	CA_Event__Address_Changed_in_UM_IP_Gateway_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List Added to Offline Address Book	CA_Event__Address_List_Added_to_Offline_Address_Book_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List Added To Organization Configuration	CA_Event__Address_List_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List Paging - Disabled	CA_Event__Address_List_Paging___Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List Paging - Enabled	CA_Event__Address_List_Paging___Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List Removed From Offline Address Book	CA_Event__Address_List_Removed_From_Offline_Address_Book_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List Removed From Organization Configuration	CA_Event__Address_List_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List Renamed	CA_Event__Address_List_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Company Filter	CA_Event__Address_List___Company_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Created	CA_Event__Address_List___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Custom Attribute Filter	CA_Event__Address_List___Custom_Attribute_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Deleted	CA_Event__Address_List___Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Department Filter	CA_Event__Address_List___Department_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Display Name	CA_Event__Address_List___Display_Name_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Included Recipient Types	CA_Event__Address_List___Included_Recipient_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Moved	CA_Event__Address_List___Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Recipient Container	CA_Event__Address_List___Recipient_Container_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Recipient Filter	CA_Event__Address_List___Recipient_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Renamed	CA_Event__Address_List___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - State/Province Filter	CA_Event__Address_List___State_Province_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address List - Updated	CA_Event__Address_List___Updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address Space Added To Send Connector	CA_Event__Address_Space_Added_To_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Address Space Removed From Send Connector	CA_Event__Address_Space_Removed_From_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Add Workstations To Domain policy changed	CA_Event__Add_Workstations_To_Domain_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Adjust Memory Quotas For A Process policy changed	CA_Event__Adjust_Memory_Quotas_For_A_Process_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Administration account added to Active Directory protection template	CA_Event__Administration_account_added_to_Active_Directory_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Administration account added to Group Policy protection template	CA_Event__Administration_account_added_to_Group_Policy_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Administration account removed from Active Directory protection template	CA_Event__Administration_account_removed_from_Active_Directory_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Administration account removed from Group Policy protection template	CA_Event__Administration_account_removed_from_Group_Policy_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: AD query container added	CA_Event__AD_query_container_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: AD query container disabled	CA_Event__AD_query_container_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: AD query container enabled	CA_Event__AD_query_container_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: AD query container removed	CA_Event__AD_query_container_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: AD Query Performed	CA_Event__AD_Query_Performed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent added to EMC auditing template	CA_Event__Agent_added_to_EMC_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent added to NetApp auditing template	CA_Event__Agent_added_to_NetApp_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent added to SharePoint auditing template	CA_Event__Agent_added_to_SharePoint_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent added to VMware auditing template	CA_Event__Agent_added_to_VMware_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration added	CA_Event__Agent_configuration_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration AD Query delay changed	CA_Event__Agent_configuration_AD_Query_delay_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration AD Query elapsed changed	CA_Event__Agent_configuration_AD_Query_elapsed_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration AD Query results changed	CA_Event__Agent_configuration_AD_Query_results_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration agent load threshold changed	CA_Event__Agent_configuration_agent_load_threshold_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration assignment changed	CA_Event__Agent_configuration_assignment_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration connection days changed	CA_Event__Agent_configuration_connection_days_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration connection from time changed	CA_Event__Agent_configuration_connection_from_time_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration connection to time changed	CA_Event__Agent_configuration_connection_to_time_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration exchange auditing delay changed	CA_Event__Agent_configuration_exchange_auditing_delay_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration file system auditing changed	CA_Event__Agent_configuration_file_system_auditing_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration file system auditing delay changed	CA_Event__Agent_configuration_file_system_auditing_delay_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration forwarding interval changed	CA_Event__Agent_configuration_forwarding_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration max events per connection changed	CA_Event__Agent_configuration_max_events_per_connection_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration polling interval changed	CA_Event__Agent_configuration_polling_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration removed	CA_Event__Agent_configuration_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration renamed	CA_Event__Agent_configuration_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration retry interval changed	CA_Event__Agent_configuration_retry_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent configuration vmware polling interval changed	CA_Event__Agent_configuration_vmware_polling_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent Heartbeat check disabled	CA_Event__Agent_Heartbeat_check_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent Heartbeat check enabled	CA_Event__Agent_Heartbeat_check_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent Heartbeat check minutes changed	CA_Event__Agent_Heartbeat_check_minutes_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent removed from EMC auditing template	CA_Event__Agent_removed_from_EMC_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent removed from NetApp auditing template	CA_Event__Agent_removed_from_NetApp_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent removed from SharePoint auditing template	CA_Event__Agent_removed_from_SharePoint_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent removed from VMware auditing template	CA_Event__Agent_removed_from_VMware_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent service has more than 100 events waiting	CA_Event__Agent_service_has_more_than_100_events_waiting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent service has reached a critical load	CA_Event__Agent_service_has_reached_a_critical_load_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Agent service has returned to normal operations	CA_Event__Agent_service_has_returned_to_normal_operations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Age Limit For Folders Changed in Public Folders Database	CA_Event__Age_Limit_For_Folders_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Age Limit For Folders Changed in Public Store	CA_Event__Age_Limit_For_Folders_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Aging No-refresh interval changed	CA_Event__Aging_No_refresh_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Aging Refresh interval changed	CA_Event__Aging_Refresh_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Action Triggered	CA_Event__Alarm_Action_Triggered_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Created	CA_Event__Alarm_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Email Completed	CA_Event__Alarm_Email_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Email Failed	CA_Event__Alarm_Email_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Event	CA_Event__Alarm_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Reconfigured	CA_Event__Alarm_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Removed	CA_Event__Alarm_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Script Complete Event	CA_Event__Alarm_Script_Complete_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Script Failed	CA_Event__Alarm_Script_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Snmp Completed	CA_Event__Alarm_Snmp_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Snmp Failed	CA_Event__Alarm_Snmp_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alarm Status Changed	CA_Event__Alarm_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alias changed for Group	CA_Event__Alias_changed_for_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alias Changed for User	CA_Event__Alias_Changed_for_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allowed DNS suffix list changed for domain	CA_Event__Allowed_DNS_suffix_list_changed_for_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Announcement Interruption Option Changed in UM Dial Plan	CA_Event__Allow_Announcement_Interruption_Option_Changed_in_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Automatic Forward Option Changed In Remote Domain Definition	CA_Event__Allow_Automatic_Forward_Option_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Callers To Send Voice Message Option Changed In UM Dial Plan	CA_Event__Allow_Callers_To_Send_Voice_Message_Option_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Callers To Transfer Option Changed In UM Dial Plan	CA_Event__Allow_Callers_To_Transfer_Option_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Caller To Send Voice Messages Option Changed In UM Auto Attendant	CA_Event__Allow_Caller_To_Send_Voice_Messages_Option_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Caller To Transfer To Users Option Changed In UM Auto Attendant	CA_Event__Allow_Caller_To_Transfer_To_Users_Option_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Calls To Extensions Option Changed In UM Mailbox Policy	CA_Event__Allow_Calls_To_Extensions_Option_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Calls To Same-Plan Users Option Changed In UM Mailbox Policy	CA_Event__Allow_Calls_To_Same_Plan_Users_Option_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Common PIN Pattern Option Changed In UM Mailbox Policy	CA_Event__Allow_Common_PIN_Pattern_Option_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Delivery Reports Option Changed In Remote Domain Definition	CA_Event__Allow_Delivery_Reports_Option_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Faxes Option Changed in UM Dial Plan	CA_Event__Allow_Faxes_Option_Changed_in_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Log On Locally policy changed	CA_Event__Allow_Log_On_Locally_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Log On Through Terminal Services policy changed	CA_Event__Allow_Log_On_Through_Terminal_Services_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Non-Delivery Reports Option Changed In Remote Domain Definition	CA_Event__Allow_Non_Delivery_Reports_Option_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Outgoing Calls Option Changed in UM IP Gateway	CA_Event__Allow_Outgoing_Calls_Option_Changed_in_UM_IP_Gateway_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Out-Of-Office Replies Option Changed In Remote Domain Definition	CA_Event__Allow_Out_Of_Office_Replies_Option_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Reconnection changed for user object	CA_Event__Allow_Reconnection_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow reconnection option changed for local user	CA_Event__Allow_reconnection_option_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Transfer To Operator During Business Hours Option Changed In UM Auto Attendant	CA_Event__Allow_Transfer_To_Operator_During_Business_Hours_Option_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Allow Transfer To Operator During Non-Business Hours Option Changed In UM Auto Attendant	CA_Event__Allow_Transfer_To_Operator_During_Non_Business_Hours_Option_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: All document versions deleted	CA_Event__All_document_versions_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: All list item versions deleted	CA_Event__All_list_item_versions_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: All permission levels revoked	CA_Event__All_permission_levels_revoked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: All Virtual Machines Licensed	CA_Event__All_Virtual_Machines_Licensed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Already Authenticated Session	CA_Event__Already_Authenticated_Session_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alternate UPN suffix added to enterprise	CA_Event__Alternate_UPN_suffix_added_to_enterprise_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alternate UPN suffix added to OU	CA_Event__Alternate_UPN_suffix_added_to_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alternate UPN suffix removed from enterprise	CA_Event__Alternate_UPN_suffix_removed_from_enterprise_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Alternate UPN suffix removed from OU	CA_Event__Alternate_UPN_suffix_removed_from_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Announcement Changed in UM Dial Plan	CA_Event__Announcement_Changed_in_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Append parent suffixes option changed	CA_Event__Append_parent_suffixes_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Application partition replica added	CA_Event__Application_partition_replica_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Application partition replica removed	CA_Event__Application_partition_replica_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Copied by Non-Owner	CA_Event__Appointment_Copied_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Copied by Owner	CA_Event__Appointment_Copied_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Copied in Shared Mailbox	CA_Event__Appointment_Copied_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Created by Non-Owner	CA_Event__Appointment_Created_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Created by Owner	CA_Event__Appointment_Created_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Created in Shared Mailbox	CA_Event__Appointment_Created_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Deleted by Non-Owner	CA_Event__Appointment_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Deleted by Owner	CA_Event__Appointment_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Deleted in Shared Mailbox	CA_Event__Appointment_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Modified by Non-Owner	CA_Event__Appointment_Modified_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Modified by Owner	CA_Event__Appointment_Modified_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Modified in Shared Mailbox	CA_Event__Appointment_Modified_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Moved by Non-Owner	CA_Event__Appointment_Moved_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Moved by Owner	CA_Event__Appointment_Moved_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Moved in Shared Mailbox	CA_Event__Appointment_Moved_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Permanently Deleted by Non-Owner	CA_Event__Appointment_Permanently_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Permanently Deleted by Owner	CA_Event__Appointment_Permanently_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Permanently Deleted in Shared Mailbox	CA_Event__Appointment_Permanently_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Read by Non-Owner	CA_Event__Appointment_Read_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Read by Owner	CA_Event__Appointment_Read_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Appointment Read in Shared Mailbox	CA_Event__Appointment_Read_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Assembly Load	CA_Event__Assembly_Load_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attention Event	CA_Event__Attention_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute added to Active Directory protection	CA_Event__Attribute_added_to_Active_Directory_protection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute added to ADAM monitoring	CA_Event__Attribute_added_to_ADAM_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute added to ADAM protection	CA_Event__Attribute_added_to_ADAM_protection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute added to monitoring	CA_Event__Attribute_added_to_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute added to optional attributes	CA_Event__Attribute_added_to_optional_attributes_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute removed from Active Directory protection	CA_Event__Attribute_removed_from_Active_Directory_protection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute removed from ADAM monitoring	CA_Event__Attribute_removed_from_ADAM_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute removed from ADAM protection	CA_Event__Attribute_removed_from_ADAM_protection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute removed from monitoring	CA_Event__Attribute_removed_from_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute removed from optional attributes	CA_Event__Attribute_removed_from_optional_attributes_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Attribute severity changed	CA_Event__Attribute_severity_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audio Codec Changed In UM Dial Plan	CA_Event__Audio_Codec_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing disabled for EMC path	CA_Event__Auditing_disabled_for_EMC_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing disabled for file system path	CA_Event__Auditing_disabled_for_file_system_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing disabled for NetApp path	CA_Event__Auditing_disabled_for_NetApp_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing disabled for registry object	CA_Event__Auditing_disabled_for_registry_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing disabled for service	CA_Event__Auditing_disabled_for_service_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing disabled for SharePoint path	CA_Event__Auditing_disabled_for_SharePoint_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing disabled for SQL instance	CA_Event__Auditing_disabled_for_SQL_instance_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing enabled for EMC path	CA_Event__Auditing_enabled_for_EMC_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing enabled for file system path	CA_Event__Auditing_enabled_for_file_system_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing enabled for NetApp path	CA_Event__Auditing_enabled_for_NetApp_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing enabled for registry object	CA_Event__Auditing_enabled_for_registry_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing enabled for service	CA_Event__Auditing_enabled_for_service_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing enabled for SharePoint path	CA_Event__Auditing_enabled_for_SharePoint_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing enabled for SQL instance	CA_Event__Auditing_enabled_for_SQL_instance_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auditing solution deployment changed	CA_Event__Auditing_solution_deployment_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Access Database Object	CA_Event__Audit_Access_Database_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Account Logon Events policy changed	CA_Event__Audit_Account_Logon_Events_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Account Management policy changed	CA_Event__Audit_Account_Management_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Add DB User	CA_Event__Audit_Add_DB_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Add Login	CA_Event__Audit_Add_Login_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Add Login to Server Role	CA_Event__Audit_Add_Login_to_Server_Role_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Add Member to DB Role	CA_Event__Audit_Add_Member_to_DB_Role_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Add Role	CA_Event__Audit_Add_Role_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Administer Bulk Server Operations	CA_Event__Audit_Administer_Bulk_Server_Operations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Database	CA_Event__Audit_Alter_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Database Object	CA_Event__Audit_Alter_Database_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Database Principal	CA_Event__Audit_Alter_Database_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Object Derived Permission	CA_Event__Audit_Alter_Object_Derived_Permission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Schema Object	CA_Event__Audit_Alter_Schema_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Server Object	CA_Event__Audit_Alter_Server_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Server Principal	CA_Event__Audit_Alter_Server_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Server Resources	CA_Event__Audit_Alter_Server_Resources_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Server Settings	CA_Event__Audit_Alter_Server_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Alter Server State Operations	CA_Event__Audit_Alter_Server_State_Operations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit App Role Change Password	CA_Event__Audit_App_Role_Change_Password_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Audit Policy Change modified	CA_Event__Audit_Audit_Policy_Change_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Authenticate Server Operations	CA_Event__Audit_Authenticate_Server_Operations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Backuplog	CA_Event__Audit_Backuplog_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Backup	CA_Event__Audit_Backup_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Conversation - Invalid Signature	CA_Event__Audit_Broker_Conversation___Invalid_Signature_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Conversation - No Certificate	CA_Event__Audit_Broker_Conversation___No_Certificate_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Conversation - No Security Header	CA_Event__Audit_Broker_Conversation___No_Security_Header_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Conversation - Run as Target Failure	CA_Event__Audit_Broker_Conversation___Run_as_Target_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Login - Authentication Failure	CA_Event__Audit_Broker_Login___Authentication_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Login - Authorization Failure	CA_Event__Audit_Broker_Login___Authorization_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Login - Login Protocol Error	CA_Event__Audit_Broker_Login___Login_Protocol_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Login - Login Success	CA_Event__Audit_Broker_Login___Login_Success_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Login - Message Format Error	CA_Event__Audit_Broker_Login___Message_Format_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Broker Login - Negotiate Failure	CA_Event__Audit_Broker_Login___Negotiate_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Change Audit - Audit Started	CA_Event__Audit_Change_Audit___Audit_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Change Audit - Audit Stopped	CA_Event__Audit_Change_Audit___Audit_Stopped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Change Audit - C2 Mode OFF	CA_Event__Audit_Change_Audit___C2_Mode_OFF_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Change Audit - C2 Mode ON	CA_Event__Audit_Change_Audit___C2_Mode_ON_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Change Database Owner	CA_Event__Audit_Change_Database_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Change Member in DB Role	CA_Event__Audit_Change_Member_in_DB_Role_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Create Database	CA_Event__Audit_Create_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Create Database Object	CA_Event__Audit_Create_Database_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Create Database Principal	CA_Event__Audit_Create_Database_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Create Object with Derived Permission	CA_Event__Audit_Create_Object_with_Derived_Permission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Create Schema Object	CA_Event__Audit_Create_Schema_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Create Server Object	CA_Event__Audit_Create_Server_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Create Server Principal	CA_Event__Audit_Create_Server_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Mirroring Login - Authentication Failure	CA_Event__Audit_Database_Mirroring_Login___Authentication_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Mirroring Login - Authorization Failure	CA_Event__Audit_Database_Mirroring_Login___Authorization_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Mirroring Login - Login Protocol Error	CA_Event__Audit_Database_Mirroring_Login___Login_Protocol_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Mirroring Login - Login Success	CA_Event__Audit_Database_Mirroring_Login___Login_Success_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Mirroring Login - Message Format Error	CA_Event__Audit_Database_Mirroring_Login___Message_Format_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Mirroring Login - Negotiate Failure	CA_Event__Audit_Database_Mirroring_Login___Negotiate_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Object Access	CA_Event__Audit_Database_Object_Access_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Object GDR - Deny	CA_Event__Audit_Database_Object_GDR___Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Object GDR - Grant	CA_Event__Audit_Database_Object_GDR___Grant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Object GDR - Revoke	CA_Event__Audit_Database_Object_GDR___Revoke_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Object Take Ownership	CA_Event__Audit_Database_Object_Take_Ownership_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Operation - Checkpoint	CA_Event__Audit_Database_Operation___Checkpoint_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Operation - Subscribe to Query Notification	CA_Event__Audit_Database_Operation___Subscribe_to_Query_Notification_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Principal Impersonation	CA_Event__Audit_Database_Principal_Impersonation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Scope GDR - Deny	CA_Event__Audit_Database_Scope_GDR___Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Scope GDR - Grant	CA_Event__Audit_Database_Scope_GDR___Grant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Database Scope GDR - Revoke	CA_Event__Audit_Database_Scope_GDR___Revoke_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit DBCC	CA_Event__Audit_DBCC_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Directory Service Access policy changed	CA_Event__Audit_Directory_Service_Access_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Disable Server Principal	CA_Event__Audit_Disable_Server_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Credential Mapping	CA_Event__Audit_Drop_Credential_Mapping_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Database	CA_Event__Audit_Drop_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Database Object	CA_Event__Audit_Drop_Database_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Database Principal	CA_Event__Audit_Drop_Database_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop DB User	CA_Event__Audit_Drop_DB_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Login	CA_Event__Audit_Drop_Login_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Login from Server Role	CA_Event__Audit_Drop_Login_from_Server_Role_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Member from DB Role	CA_Event__Audit_Drop_Member_from_DB_Role_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Object Derived Permission	CA_Event__Audit_Drop_Object_Derived_Permission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Role	CA_Event__Audit_Drop_Role_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Schema Object	CA_Event__Audit_Drop_Schema_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Server Object	CA_Event__Audit_Drop_Server_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Drop Server Principal	CA_Event__Audit_Drop_Server_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Dump Database	CA_Event__Audit_Dump_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Dump Database Object	CA_Event__Audit_Dump_Database_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Dump Database Principal	CA_Event__Audit_Dump_Database_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Dump Object Derived Permission	CA_Event__Audit_Dump_Object_Derived_Permission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Dump Schema Object	CA_Event__Audit_Dump_Schema_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Dump Server Object	CA_Event__Audit_Dump_Server_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Dump Server Principal	CA_Event__Audit_Dump_Server_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Enable Server Principal	CA_Event__Audit_Enable_Server_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit event description changed	CA_Event__Audit_event_description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit event disabled	CA_Event__Audit_event_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit event enabled	CA_Event__Audit_event_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit event results changed	CA_Event__Audit_event_results_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit event severity changed	CA_Event__Audit_event_severity_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit External Access Server Operations	CA_Event__Audit_External_Access_Server_Operations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Grant Database Access to DB User	CA_Event__Audit_Grant_Database_Access_to_DB_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Load Database Object	CA_Event__Audit_Load_Database_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Load Database Principal	CA_Event__Audit_Load_Database_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Load Object Derived Permission	CA_Event__Audit_Load_Object_Derived_Permission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Load Schema Object	CA_Event__Audit_Load_Schema_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Load Server Object	CA_Event__Audit_Load_Server_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Load Server Principal	CA_Event__Audit_Load_Server_Principal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login	CA_Event__Audit_Login_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Credential Property	CA_Event__Audit_Login_Change_Credential_Property_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Default Database Property	CA_Event__Audit_Login_Change_Default_Database_Property_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Default Language Property	CA_Event__Audit_Login_Change_Default_Language_Property_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Expiration Property	CA_Event__Audit_Login_Change_Expiration_Property_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Name Property	CA_Event__Audit_Login_Change_Name_Property_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Password - Changed	CA_Event__Audit_Login_Change_Password___Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Password - Must Change	CA_Event__Audit_Login_Change_Password___Must_Change_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Password - Reset	CA_Event__Audit_Login_Change_Password___Reset_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Password - Self Changed	CA_Event__Audit_Login_Change_Password___Self_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Password - Self Reset	CA_Event__Audit_Login_Change_Password___Self_Reset_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Password - Unlocked	CA_Event__Audit_Login_Change_Password___Unlocked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Change Policy Property	CA_Event__Audit_Login_Change_Policy_Property_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login Failed	CA_Event__Audit_Login_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login GDR - Deny	CA_Event__Audit_Login_GDR___Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login GDR - Grant	CA_Event__Audit_Login_GDR___Grant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Login GDR - Revoke	CA_Event__Audit_Login_GDR___Revoke_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Logon Events policy changed	CA_Event__Audit_Logon_Events_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Logout	CA_Event__Audit_Logout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Map Credential Login	CA_Event__Audit_Map_Credential_Login_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Object Access policy changed	CA_Event__Audit_Object_Access_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Open Database Object	CA_Event__Audit_Open_Database_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Privilege Use policy changed	CA_Event__Audit_Privilege_Use_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Process Tracking policy changed	CA_Event__Audit_Process_Tracking_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Restore	CA_Event__Audit_Restore_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Revoke Database Access from DB User	CA_Event__Audit_Revoke_Database_Access_from_DB_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Schema Object Access	CA_Event__Audit_Schema_Object_Access_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Schema Object GDR - Deny	CA_Event__Audit_Schema_Object_GDR___Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Schema Object GDR - Grant	CA_Event__Audit_Schema_Object_GDR___Grant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Schema Object GDR - Revoke	CA_Event__Audit_Schema_Object_GDR___Revoke_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Schema Object Take Ownership	CA_Event__Audit_Schema_Object_Take_Ownership_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Alter Trace	CA_Event__Audit_Server_Alter_Trace_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Object GDR - Deny	CA_Event__Audit_Server_Object_GDR___Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Object GDR - Grant	CA_Event__Audit_Server_Object_GDR___Grant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Object GDR - Revoke	CA_Event__Audit_Server_Object_GDR___Revoke_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Object Take Ownership	CA_Event__Audit_Server_Object_Take_Ownership_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Pause	CA_Event__Audit_Server_Pause_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Principal Impersonation	CA_Event__Audit_Server_Principal_Impersonation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Resume	CA_Event__Audit_Server_Resume_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Scope GDR - Deny	CA_Event__Audit_Server_Scope_GDR___Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Scope GDR - Grant	CA_Event__Audit_Server_Scope_GDR___Grant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Scope GDR - Revoke	CA_Event__Audit_Server_Scope_GDR___Revoke_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Shutdown	CA_Event__Audit_Server_Shutdown_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Server Start	CA_Event__Audit_Server_Start_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Statement Permission	CA_Event__Audit_Statement_Permission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit System Events policy changed	CA_Event__Audit_System_Events_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit Transfer Schema Object	CA_Event__Audit_Transfer_Schema_Object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit: Audit The Access Of Global System Objects policy changed	CA_Event__Audit__Audit_The_Access_Of_Global_System_Objects_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit: Audit The Use Of Backup And Restore Privilege policy changed	CA_Event__Audit__Audit_The_Use_Of_Backup_And_Restore_Privilege_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings	CA_Event__Audit__Force_audit_policy_subcategory_settings__Windows_Vista_or_later__to_override_audit_policy_category_settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Audit: Shut Down System Immediately If Unable To Log Security Audits policy changed	CA_Event__Audit__Shut_Down_System_Immediately_If_Unable_To_Log_Security_Audits_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Authenticated Users delivery restriction changed for group	CA_Event__Authenticated_Users_delivery_restriction_changed_for_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Authenticated Users delivery restriction changed for user	CA_Event__Authenticated_Users_delivery_restriction_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Authorization Event	CA_Event__Authorization_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: AutoConfigFileZones setting changed	CA_Event__AutoConfigFileZones_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic E-mail Address Updating Option changed	CA_Event__Automatic_E_mail_Address_Updating_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic Intersite topology generation role changed	CA_Event__Automatic_Intersite_topology_generation_role_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic intersite topology generator for the site has been disabled	CA_Event__Automatic_intersite_topology_generator_for_the_site_has_been_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic intersite topology generator for the site has been enabled	CA_Event__Automatic_intersite_topology_generator_for_the_site_has_been_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic intrasite topology generation for the site has been enabled	CA_Event__Automatic_intrasite_topology_generation_for_the_site_has_been_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic intrasite topology generator for the site has been disabled	CA_Event__Automatic_intrasite_topology_generator_for_the_site_has_been_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic Updates Day Setting Changed	CA_Event__Automatic_Updates_Day_Setting_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic Updates Option Changed	CA_Event__Automatic_Updates_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Automatic Updates Time Setting Changed	CA_Event__Automatic_Updates_Time_Setting_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auto Stats - Async Completed	CA_Event__Auto_Stats___Async_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auto Stats - Async Queued	CA_Event__Auto_Stats___Async_Queued_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auto Stats - Async Starting	CA_Event__Auto_Stats___Async_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Auto Stats - Sync	CA_Event__Auto_Stats___Sync_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Background Job Error - Failure with Error	CA_Event__Background_Job_Error___Failure_with_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Background Job Error - Queue is Full	CA_Event__Background_Job_Error___Queue_is_Full_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Background Job Error - Returned Error	CA_Event__Background_Job_Error___Returned_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Back Up Files And Directories policy changed	CA_Event__Back_Up_Files_And_Directories_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Bad Username Session Event	CA_Event__Bad_Username_Session_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Basic Authentication Option changed on Receive Connector	CA_Event__Basic_Authentication_Option_changed_on_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Basic Event	CA_Event__Basic_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Binary registry value added	CA_Event__Binary_registry_value_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Binary registry value changed	CA_Event__Binary_registry_value_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Binary registry value deleted	CA_Event__Binary_registry_value_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: BIND secondaries flag changed	CA_Event__BIND_secondaries_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: BitLocker Drive Encryption added	CA_Event__BitLocker_Drive_Encryption_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: BitLocker Drive Encryption changed	CA_Event__BitLocker_Drive_Encryption_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: BitLocker Drive Encryption removed	CA_Event__BitLocker_Drive_Encryption_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Bitmap Warning	CA_Event__Bitmap_Warning_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Blocked Process Report	CA_Event__Blocked_Process_Report_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Bridge all site links option changed	CA_Event__Bridge_all_site_links_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Activation - Aborted	CA_Event__Broker__Activation___Aborted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Activation - Ended	CA_Event__Broker__Activation___Ended_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Activation - Start	CA_Event__Broker__Activation___Start_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Accept	CA_Event__Broker__Connection___Accept_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Closed	CA_Event__Broker__Connection___Closed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Closing	CA_Event__Broker__Connection___Closing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Connected	CA_Event__Broker__Connection___Connected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Connecting	CA_Event__Broker__Connection___Connecting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Connect Failed	CA_Event__Broker__Connection___Connect_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Receive IO Error	CA_Event__Broker__Connection___Receive_IO_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Connection - Send IO Error	CA_Event__Broker__Connection___Send_IO_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation Group - Create	CA_Event__Broker__Conversation_Group___Create_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation Group - Drop	CA_Event__Broker__Conversation_Group___Drop_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Begin Dialog	CA_Event__Broker__Conversation___Begin_Dialog_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Broker Initiated Error	CA_Event__Broker__Conversation___Broker_Initiated_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Dialog Created	CA_Event__Broker__Conversation___Dialog_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - End Conversation	CA_Event__Broker__Conversation___End_Conversation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - End Conversation with Cleanup	CA_Event__Broker__Conversation___End_Conversation_with_Cleanup_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - End Conversation with Error	CA_Event__Broker__Conversation___End_Conversation_with_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Received Broker Error Message	CA_Event__Broker__Conversation___Received_Broker_Error_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Received End Conversation	CA_Event__Broker__Conversation___Received_End_Conversation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Received End Conversation Ack	CA_Event__Broker__Conversation___Received_End_Conversation_Ack_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Received End Conversation with Error	CA_Event__Broker__Conversation___Received_End_Conversation_with_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Received Sequenced Message	CA_Event__Broker__Conversation___Received_Sequenced_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Send Message	CA_Event__Broker__Conversation___Send_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Conversation - Terminate Dialog	CA_Event__Broker__Conversation___Terminate_Dialog_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Corrupted Message	CA_Event__Broker__Corrupted_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Forwarded Message Dropped	CA_Event__Broker__Forwarded_Message_Dropped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Forwarded Message Sent	CA_Event__Broker__Forwarded_Message_Sent_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Message Classify - Delayed	CA_Event__Broker__Message_Classify___Delayed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Message Classify - Local	CA_Event__Broker__Message_Classify___Local_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Message Classify - Remote	CA_Event__Broker__Message_Classify___Remote_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Mirrored Route State Changed	CA_Event__Broker__Mirrored_Route_State_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Queue Disabled	CA_Event__Broker__Queue_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Remote Message Ack - Acknowledgement Received	CA_Event__Broker__Remote_Message_Ack___Acknowledgement_Received_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Remote Message Ack - Acknowledgement Sent	CA_Event__Broker__Remote_Message_Ack___Acknowledgement_Sent_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Remote Message Ack - Message with Acknowledgement Received	CA_Event__Broker__Remote_Message_Ack___Message_with_Acknowledgement_Received_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Remote Message Ack - Message with Acknowledgement Sent	CA_Event__Broker__Remote_Message_Ack___Message_with_Acknowledgement_Sent_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Sequenced Message Undeliverable	CA_Event__Broker__Sequenced_Message_Undeliverable_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Transmission	CA_Event__Broker__Transmission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Broker: Unsequenced Message Undeliverable	CA_Event__Broker__Unsequenced_Message_Undeliverable_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Business Hours Greeting Changed for UM Auto Attendant	CA_Event__Business_Hours_Greeting_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Business Hours Main Menu Prompt Changed for UM Auto Attendant	CA_Event__Business_Hours_Main_Menu_Prompt_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Business Hours Schedule Changed for UM Auto Attendant	CA_Event__Business_Hours_Schedule_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Bypass Traverse Checking policy changed	CA_Event__Bypass_Traverse_Checking_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Calendar Attendant processing	CA_Event__Calendar_Attendant_processing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Calendar Opened by Non-Owner	CA_Event__Calendar_Opened_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Calendar Opened by Owner	CA_Event__Calendar_Opened_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Callers Can Contact Address List Changed In UM Auto Attendant	CA_Event__Callers_Can_Contact_Address_List_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Callers Can Contact Address List Changed In UM Dial Plan	CA_Event__Callers_Can_Contact_Address_List_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Callers Can Contact Auto Attendant Changed In UM Dial Plan	CA_Event__Callers_Can_Contact_Auto_Attendant_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Callers Can Contact Extension Changed In UM Dial Plan	CA_Event__Callers_Can_Contact_Extension_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Callers Can Contact Option Changed In UM Auto Attendant	CA_Event__Callers_Can_Contact_Option_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Callers Can Contact Option Changed In UM Dial Plan	CA_Event__Callers_Can_Contact_Option_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Canceled Host Operation	CA_Event__Canceled_Host_Operation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Can't Change Password changed for local user	CA_Event__Can_t_Change_Password_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central Access Policy added to group policy	CA_Event__Central_Access_Policy_added_to_group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access policy created	CA_Event__Central_access_policy_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access policy deleted	CA_Event__Central_access_policy_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access policy description changed	CA_Event__Central_access_policy_description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access policy permission changed	CA_Event__Central_access_policy_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central Access Policy removed from group policy	CA_Event__Central_Access_Policy_removed_from_group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access policy rule added	CA_Event__Central_access_policy_rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access policy rule changed	CA_Event__Central_access_policy_rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access policy rule removed	CA_Event__Central_access_policy_rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access rule created	CA_Event__Central_access_rule_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access rule deleted	CA_Event__Central_access_rule_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access rule description changed	CA_Event__Central_access_rule_description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access rule effective permission changed	CA_Event__Central_access_rule_effective_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access rule permission changed	CA_Event__Central_access_rule_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access rule proposed permission changed	CA_Event__Central_access_rule_proposed_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Central access rule target resource changed	CA_Event__Central_access_rule_target_resource_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: CEPP configuration changed	CA_Event__CEPP_configuration_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Change The System Time policy changed	CA_Event__Change_The_System_Time_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Change the time zone	CA_Event__Change_the_time_zone_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: City changed on user object	CA_Event__City_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type AD attribute changed	CA_Event__Claim_type_AD_attribute_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type class added	CA_Event__Claim_type_class_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type class changed	CA_Event__Claim_type_class_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type class removed	CA_Event__Claim_type_class_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type created	CA_Event__Claim_type_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type deleted	CA_Event__Claim_type_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type description changed	CA_Event__Claim_type_description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type disabled	CA_Event__Claim_type_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type display name changed	CA_Event__Claim_type_display_name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type enabled	CA_Event__Claim_type_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type permission changed	CA_Event__Claim_type_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Claim type suggested values changed	CA_Event__Claim_type_suggested_values_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Class removed from auxiliary classes in schema	CA_Event__Class_removed_from_auxiliary_classes_in_schema_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Class removed from possible superiors in schema	CA_Event__Class_removed_from_possible_superiors_in_schema_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cluster Compliance Checked	CA_Event__Cluster_Compliance_Checked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cluster Created	CA_Event__Cluster_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cluster Destroyed	CA_Event__Cluster_Destroyed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cluster Event	CA_Event__Cluster_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cluster Overcommitted	CA_Event__Cluster_Overcommitted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cluster Reconfigured	CA_Event__Cluster_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cluster Status Changed	CA_Event__Cluster_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Collect Organizational Health Data Changed	CA_Event__Collect_Organizational_Health_Data_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Company changed for user object	CA_Event__Company_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer account disabled	CA_Event__Computer_account_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer account enabled	CA_Event__Computer_account_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer added	CA_Event__Computer_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Administrative Template setting changed	CA_Event__Computer_Administrative_Template_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Group Policy Preference setting changed	CA_Event__Computer_Group_Policy_Preference_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer moved	CA_Event__Computer_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Autoenrollment Settings changed	CA_Event__Computer_Public_Key_Policies_Autoenrollment_Settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Automatic Certificate Request added	CA_Event__Computer_Public_Key_Policies_Automatic_Certificate_Request_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Automatic Certificate Request changed	CA_Event__Computer_Public_Key_Policies_Automatic_Certificate_Request_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Automatic Certificate Request removed	CA_Event__Computer_Public_Key_Policies_Automatic_Certificate_Request_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Encrypting File System DRA added	CA_Event__Computer_Public_Key_Policies_Encrypting_File_System_DRA_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Encrypting File System DRA changed	CA_Event__Computer_Public_Key_Policies_Encrypting_File_System_DRA_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Encrypting File System DRA removed	CA_Event__Computer_Public_Key_Policies_Encrypting_File_System_DRA_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Enterprise Trust List added	CA_Event__Computer_Public_Key_Policies_Enterprise_Trust_List_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Enterprise Trust List changed	CA_Event__Computer_Public_Key_Policies_Enterprise_Trust_List_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Enterprise Trust List removed	CA_Event__Computer_Public_Key_Policies_Enterprise_Trust_List_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Trusted Root Certification Authority added	CA_Event__Computer_Public_Key_Policies_Trusted_Root_Certification_Authority_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Trusted Root Certification Authority changed	CA_Event__Computer_Public_Key_Policies_Trusted_Root_Certification_Authority_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Public Key Policies Trusted Root Certification Authority removed	CA_Event__Computer_Public_Key_Policies_Trusted_Root_Certification_Authority_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer removed	CA_Event__Computer_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer renamed	CA_Event__Computer_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer service pack applied	CA_Event__Computer_service_pack_applied_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer service pack rolled back	CA_Event__Computer_service_pack_rolled_back_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Installation Policy added	CA_Event__Computer_Software_Installation_Policy_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Installation Policy changed	CA_Event__Computer_Software_Installation_Policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Installation Policy removed	CA_Event__Computer_Software_Installation_Policy_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Hash Rule added	CA_Event__Computer_Software_Restriction_Basic_User_Hash_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Hash Rule changed	CA_Event__Computer_Software_Restriction_Basic_User_Hash_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Hash Rule removed	CA_Event__Computer_Software_Restriction_Basic_User_Hash_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Path Rule added	CA_Event__Computer_Software_Restriction_Basic_User_Path_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Path Rule changed	CA_Event__Computer_Software_Restriction_Basic_User_Path_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Path Rule removed	CA_Event__Computer_Software_Restriction_Basic_User_Path_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Zone Rule added	CA_Event__Computer_Software_Restriction_Basic_User_Zone_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Zone Rule changed	CA_Event__Computer_Software_Restriction_Basic_User_Zone_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Basic User Zone Rule removed	CA_Event__Computer_Software_Restriction_Basic_User_Zone_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Designated File Types changed	CA_Event__Computer_Software_Restriction_Designated_File_Types_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Certificate Rule added	CA_Event__Computer_Software_Restriction_Disallowed_Certificate_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Certificate Rule changed	CA_Event__Computer_Software_Restriction_Disallowed_Certificate_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Certificate Rule removed	CA_Event__Computer_Software_Restriction_Disallowed_Certificate_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Hash Rule added	CA_Event__Computer_Software_Restriction_Disallowed_Hash_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Hash Rule changed	CA_Event__Computer_Software_Restriction_Disallowed_Hash_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Hash Rule removed	CA_Event__Computer_Software_Restriction_Disallowed_Hash_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Path Rule added	CA_Event__Computer_Software_Restriction_Disallowed_Path_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Path Rule changed	CA_Event__Computer_Software_Restriction_Disallowed_Path_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Path Rule removed	CA_Event__Computer_Software_Restriction_Disallowed_Path_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Zone Rule added	CA_Event__Computer_Software_Restriction_Disallowed_Zone_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Zone Rule changed	CA_Event__Computer_Software_Restriction_Disallowed_Zone_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Disallowed Zone Rule removed	CA_Event__Computer_Software_Restriction_Disallowed_Zone_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Enforcement Files changed	CA_Event__Computer_Software_Restriction_Enforcement_Files_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Enforcement Users changed	CA_Event__Computer_Software_Restriction_Enforcement_Users_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Policies Default Security Level changed	CA_Event__Computer_Software_Restriction_Policies_Default_Security_Level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Trusted Publishers changed	CA_Event__Computer_Software_Restriction_Trusted_Publishers_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Certificate Rule added	CA_Event__Computer_Software_Restriction_Unrestricted_Certificate_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Certificate Rule changed	CA_Event__Computer_Software_Restriction_Unrestricted_Certificate_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Certificate Rule removed	CA_Event__Computer_Software_Restriction_Unrestricted_Certificate_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Hash Rule added	CA_Event__Computer_Software_Restriction_Unrestricted_Hash_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Hash Rule changed	CA_Event__Computer_Software_Restriction_Unrestricted_Hash_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Hash Rule removed	CA_Event__Computer_Software_Restriction_Unrestricted_Hash_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Path Rule added	CA_Event__Computer_Software_Restriction_Unrestricted_Path_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Path Rule changed	CA_Event__Computer_Software_Restriction_Unrestricted_Path_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Path Rule removed	CA_Event__Computer_Software_Restriction_Unrestricted_Path_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Zone Rule added	CA_Event__Computer_Software_Restriction_Unrestricted_Zone_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Zone Rule changed	CA_Event__Computer_Software_Restriction_Unrestricted_Zone_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Computer Software Restriction Unrestricted Zone Rule removed	CA_Event__Computer_Software_Restriction_Unrestricted_Zone_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connection DNS Registration option changed	CA_Event__Connection_DNS_Registration_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connection object added	CA_Event__Connection_object_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connection object from-server changed	CA_Event__Connection_object_from_server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connection object removed	CA_Event__Connection_object_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connection object schedule changed	CA_Event__Connection_object_schedule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connection object transport changed	CA_Event__Connection_object_transport_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connection-specific DNS Suffix changed	CA_Event__Connection_specific_DNS_Suffix_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connect Client Drives At Logon changed for local user	CA_Event__Connect_Client_Drives_At_Logon_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connect client drives at logon changed for user object	CA_Event__Connect_client_drives_at_logon_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connect Client Printers At Logon changed for local user	CA_Event__Connect_Client_Printers_At_Logon_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Connect client printers at logon changed for user object	CA_Event__Connect_client_printers_at_logon_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contacts Opened by Non-Owner	CA_Event__Contacts_Opened_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contacts Opened by Owner	CA_Event__Contacts_Opened_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Copied by Non-Owner	CA_Event__Contact_Copied_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Copied by Owner	CA_Event__Contact_Copied_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Copied in Shared Mailbox	CA_Event__Contact_Copied_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Created by Non-Owner	CA_Event__Contact_Created_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Created by Owner	CA_Event__Contact_Created_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Created in Shared Mailbox	CA_Event__Contact_Created_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Deleted by Non-Owner	CA_Event__Contact_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Deleted by Owner	CA_Event__Contact_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Deleted in Shared Mailbox	CA_Event__Contact_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Modified by Non-Owner	CA_Event__Contact_Modified_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Modified by Owner	CA_Event__Contact_Modified_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Modified in Shared Mailbox	CA_Event__Contact_Modified_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Moved by Non-Owner	CA_Event__Contact_Moved_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Moved by Owner	CA_Event__Contact_Moved_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Moved in Shared Mailbox	CA_Event__Contact_Moved_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Permanently Deleted by Non-Owner	CA_Event__Contact_Permanently_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Permanently Deleted by Owner	CA_Event__Contact_Permanently_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Permanently Deleted in Shared Mailbox	CA_Event__Contact_Permanently_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Read by Non-Owner	CA_Event__Contact_Read_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Read by Owner	CA_Event__Contact_Read_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contact Read in Shared Mailbox	CA_Event__Contact_Read_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contents of DNS server list changed	CA_Event__Contents_of_DNS_server_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contents of DNS suffix list changed	CA_Event__Contents_of_DNS_suffix_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Contents of WINS server list changed	CA_Event__Contents_of_WINS_server_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Country Code Changed In UM Dial Plan	CA_Event__Country_Code_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Country/Region changed on user object	CA_Event__Country_Region_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: CPU Threshold Exceeded	CA_Event__CPU_Threshold_Exceeded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Crash on Audit Fail Policy changed	CA_Event__Crash_on_Audit_Fail_Policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Create A Pagefile policy changed	CA_Event__Create_A_Pagefile_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Create A Token Object policy changed	CA_Event__Create_A_Token_Object_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Create Global Objects policy changed	CA_Event__Create_Global_Objects_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Create Permanent Shared Objects policy changed	CA_Event__Create_Permanent_Shared_Objects_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Create symbolic links	CA_Event__Create_symbolic_links_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Critical link failures allowed parameter changed	CA_Event__Critical_link_failures_allowed_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cross-forest trust added	CA_Event__Cross_forest_trust_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cross-forest trust removed	CA_Event__Cross_forest_trust_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cursor - Close	CA_Event__Cursor___Close_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cursor - Execute	CA_Event__Cursor___Execute_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cursor - Implicit Conversion	CA_Event__Cursor___Implicit_Conversion_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cursor - Open	CA_Event__Cursor___Open_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cursor - Prepare	CA_Event__Cursor___Prepare_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cursor - Recompile	CA_Event__Cursor___Recompile_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Cursor - Unprepare	CA_Event__Cursor___Unprepare_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Event	CA_Event__Customization_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Failed	CA_Event__Customization_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Linux Identity Failed	CA_Event__Customization_Linux_Identity_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Network Setup Failed	CA_Event__Customization_Network_Setup_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Started	CA_Event__Customization_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Succeeded	CA_Event__Customization_Succeeded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Sysprep Failed	CA_Event__Customization_Sysprep_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Customization Unknown Failure	CA_Event__Customization_Unknown_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 10 changed	CA_Event__Custom_Attribute_10_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 10 Changed For Group	CA_Event__Custom_Attribute_10_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 11 changed	CA_Event__Custom_Attribute_11_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 11 Changed For Group	CA_Event__Custom_Attribute_11_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 12 changed	CA_Event__Custom_Attribute_12_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 12 Changed For Group	CA_Event__Custom_Attribute_12_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 13 changed	CA_Event__Custom_Attribute_13_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 13 Changed For Group	CA_Event__Custom_Attribute_13_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 14 changed	CA_Event__Custom_Attribute_14_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 14 Changed For Group	CA_Event__Custom_Attribute_14_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 15 changed	CA_Event__Custom_Attribute_15_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 15 Changed For Group	CA_Event__Custom_Attribute_15_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 1 changed	CA_Event__Custom_Attribute_1_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 1 Changed For Group	CA_Event__Custom_Attribute_1_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 2 changed	CA_Event__Custom_Attribute_2_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 2 Changed For Group	CA_Event__Custom_Attribute_2_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 3 changed	CA_Event__Custom_Attribute_3_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 3 Changed For Group	CA_Event__Custom_Attribute_3_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 4 changed	CA_Event__Custom_Attribute_4_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 4 Changed For Group	CA_Event__Custom_Attribute_4_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 5 changed	CA_Event__Custom_Attribute_5_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 5 Changed For Group	CA_Event__Custom_Attribute_5_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 6 changed	CA_Event__Custom_Attribute_6_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 6 Changed For Group	CA_Event__Custom_Attribute_6_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 7 changed	CA_Event__Custom_Attribute_7_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 7 Changed For Group	CA_Event__Custom_Attribute_7_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 8 changed	CA_Event__Custom_Attribute_8_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 8 Changed For Group	CA_Event__Custom_Attribute_8_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 9 changed	CA_Event__Custom_Attribute_9_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Attribute 9 Changed For Group	CA_Event__Custom_Attribute_9_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Field Def Added	CA_Event__Custom_Field_Def_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Field Def Event	CA_Event__Custom_Field_Def_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Field Def Removed	CA_Event__Custom_Field_Def_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Field Def Renamed	CA_Event__Custom_Field_Def_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Field Event	CA_Event__Custom_Field_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Custom Field Value Changed	CA_Event__Custom_Field_Value_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DACL changed on AdminSDHolder object	CA_Event__DACL_changed_on_AdminSDHolder_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DACL changed on computer object	CA_Event__DACL_changed_on_computer_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DACL changed on domain object	CA_Event__DACL_changed_on_domain_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DACL changed on group object	CA_Event__DACL_changed_on_group_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DACL changed on group policy object	CA_Event__DACL_changed_on_group_policy_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DACL changed on OU object	CA_Event__DACL_changed_on_OU_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DACL changed on user object	CA_Event__DACL_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Admission Control Disabled	CA_Event__Das_Admission_Control_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Admission Control Enabled	CA_Event__Das_Admission_Control_Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Agent Found Event	CA_Event__Das_Agent_Found_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Agent Unavailable Event	CA_Event__Das_Agent_Unavailable_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Cluster Isolated	CA_Event__Das_Cluster_Isolated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Disabled	CA_Event__Das_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Enabled	CA_Event__Das_Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Host Failed	CA_Event__Das_Host_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Das Host Isolated	CA_Event__Das_Host_Isolated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Availability Group added	CA_Event__Database_Availability_Group_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Availability Group removed	CA_Event__Database_Availability_Group_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Availability Group renamed	CA_Event__Database_Availability_Group_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Availability Group Witness Directory changed	CA_Event__Database_Availability_Group_Witness_Directory_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Availability Group Witness Server changed	CA_Event__Database_Availability_Group_Witness_Server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Can Be Overwritten By A Restore Changed for Public Folders Database	CA_Event__Database_Can_Be_Overwritten_By_A_Restore_Changed_for_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Can Be Overwritten By A Restore Changed in Public Store	CA_Event__Database_Can_Be_Overwritten_By_A_Restore_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Directory setting changed	CA_Event__Database_Directory_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database maintenance added	CA_Event__Database_maintenance_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database maintenance changed	CA_Event__Database_maintenance_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database maintenance disabled	CA_Event__Database_maintenance_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database maintenance enabled	CA_Event__Database_maintenance_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Maintenance Interval changed in Mailbox database	CA_Event__Database_Maintenance_Interval_changed_in_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Maintenance Interval changed in Mailbox store	CA_Event__Database_Maintenance_Interval_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Maintenance Interval Changed in Public Folders Database	CA_Event__Database_Maintenance_Interval_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Maintenance Interval Changed in Public Store	CA_Event__Database_Maintenance_Interval_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database maintenance removed	CA_Event__Database_maintenance_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Mirroring Connection	CA_Event__Database_Mirroring_Connection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Mirroring State Change	CA_Event__Database_Mirroring_State_Change_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Database Suspect Data Page	CA_Event__Database_Suspect_Data_Page_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datacenter Created	CA_Event__Datacenter_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datacenter Event	CA_Event__Datacenter_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datacenter Renamed	CA_Event__Datacenter_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Capacity Increased	CA_Event__Datastore_Capacity_Increased_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Destroyed	CA_Event__Datastore_Destroyed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Discovered	CA_Event__Datastore_Discovered_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Duplicated	CA_Event__Datastore_Duplicated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Event	CA_Event__Datastore_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore File Copied	CA_Event__Datastore_File_Copied_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore File Deleted	CA_Event__Datastore_File_Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore File Event	CA_Event__Datastore_File_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore File Moved	CA_Event__Datastore_File_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore IORMReconfigured	CA_Event__Datastore_IORMReconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Principal Configured	CA_Event__Datastore_Principal_Configured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Removed On Host	CA_Event__Datastore_Removed_On_Host_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Renamed	CA_Event__Datastore_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Datastore Renamed On Host	CA_Event__Datastore_Renamed_On_Host_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Data File Auto Grow	CA_Event__Data_File_Auto_Grow_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Data File Auto Shrink	CA_Event__Data_File_Auto_Shrink_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DCOM: Machine Access Restrictions policy defined	CA_Event__DCOM__Machine_Access_Restrictions_policy_defined_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DCOM: Machine Access Restrictions policy undefined	CA_Event__DCOM__Machine_Access_Restrictions_policy_undefined_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DCOM: Machine Access Restrictions security settings changed	CA_Event__DCOM__Machine_Access_Restrictions_security_settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DCOM: Machine Launch Restrictions policy defined	CA_Event__DCOM__Machine_Launch_Restrictions_policy_defined_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DCOM: Machine Launch Restrictions policy undefined	CA_Event__DCOM__Machine_Launch_Restrictions_policy_undefined_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DCOM: Machine Launch Restrictions security settings changed	CA_Event__DCOM__Machine_Launch_Restrictions_security_settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deadlock Graph	CA_Event__Deadlock_Graph_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Debug Programs policy changed	CA_Event__Debug_Programs_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default Aging State setting changed	CA_Event__Default_Aging_State_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default gateway changed	CA_Event__Default_gateway_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default Language Changed In UM Dial Plan	CA_Event__Default_Language_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default Public Folder database changed for Mailbox database	CA_Event__Default_Public_Folder_database_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default Public Store changed for Mailbox store	CA_Event__Default_Public_Store_changed_for_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default quota for partition changed	CA_Event__Default_quota_for_partition_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default site query policy object changed	CA_Event__Default_site_query_policy_object_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default To Main Client Printer changed for local user	CA_Event__Default_To_Main_Client_Printer_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Default to main client printer changed for user object	CA_Event__Default_to_main_client_printer_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Access Node Added	CA_Event__Defender_Access_Node_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Access Node Removed	CA_Event__Defender_Access_Node_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender License Added	CA_Event__Defender_License_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender License Removed	CA_Event__Defender_License_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender License Usage Changed	CA_Event__Defender_License_Usage_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Password Changed	CA_Event__Defender_Password_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Password Cleared	CA_Event__Defender_Password_Cleared_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Password Expiry Cleared	CA_Event__Defender_Password_Expiry_Cleared_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Password Expiry Set	CA_Event__Defender_Password_Expiry_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Password Set	CA_Event__Defender_Password_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Policy Added	CA_Event__Defender_Policy_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Policy Changed for Access Node	CA_Event__Defender_Policy_Changed_for_Access_Node_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Policy Changed for Group	CA_Event__Defender_Policy_Changed_for_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Policy Changed for Security Server	CA_Event__Defender_Policy_Changed_for_Security_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Policy Changed for User	CA_Event__Defender_Policy_Changed_for_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Policy Removed	CA_Event__Defender_Policy_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender RADIUS Payload Added	CA_Event__Defender_RADIUS_Payload_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender RADIUS Payload Changed for Access Node	CA_Event__Defender_RADIUS_Payload_Changed_for_Access_Node_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender RADIUS Payload Changed for Group	CA_Event__Defender_RADIUS_Payload_Changed_for_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender RADIUS Payload Changed for Security Server	CA_Event__Defender_RADIUS_Payload_Changed_for_Security_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender RADIUS Payload Changed for User	CA_Event__Defender_RADIUS_Payload_Changed_for_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender RADIUS Payload Removed	CA_Event__Defender_RADIUS_Payload_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Security Server Added	CA_Event__Defender_Security_Server_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Security Server Assigned to Access Node	CA_Event__Defender_Security_Server_Assigned_to_Access_Node_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Security Server Removed	CA_Event__Defender_Security_Server_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Security Server Unassigned to Access Node	CA_Event__Defender_Security_Server_Unassigned_to_Access_Node_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Added	CA_Event__Defender_Token_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Assigned	CA_Event__Defender_Token_Assigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token License Added	CA_Event__Defender_Token_License_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token License Removed	CA_Event__Defender_Token_License_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token License Usage Changed	CA_Event__Defender_Token_License_Usage_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token PIN Changed	CA_Event__Defender_Token_PIN_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token PIN Cleared	CA_Event__Defender_Token_PIN_Cleared_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token PIN Expiry Cleared	CA_Event__Defender_Token_PIN_Expiry_Cleared_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token PIN Expiry Set	CA_Event__Defender_Token_PIN_Expiry_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token PIN Set	CA_Event__Defender_Token_PIN_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Removed	CA_Event__Defender_Token_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Temporary Response Cleared	CA_Event__Defender_Token_Temporary_Response_Cleared_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Temporary Response Expiration Changed	CA_Event__Defender_Token_Temporary_Response_Expiration_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Temporary Response Set	CA_Event__Defender_Token_Temporary_Response_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Temporary Response Usage Changed	CA_Event__Defender_Token_Temporary_Response_Usage_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Defender Token Unassigned	CA_Event__Defender_Token_Unassigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Degree of Parallelism - Delete	CA_Event__Degree_of_Parallelism___Delete_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Degree of Parallelism - Insert	CA_Event__Degree_of_Parallelism___Insert_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Degree of Parallelism - Select	CA_Event__Degree_of_Parallelism___Select_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Degree of Parallelism - Update	CA_Event__Degree_of_Parallelism___Update_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Delegation Authentication Protocol changed for user object	CA_Event__Delegation_Authentication_Protocol_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Move Destination Folder Changed in Managed Folder Settings	CA_Event__Deleted_Item_Move_Destination_Folder_Changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Retain Until Backup Storage Option Changed	CA_Event__Deleted_Item_Retain_Until_Backup_Storage_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Retention Option Changed in Managed Folder Settings	CA_Event__Deleted_Item_Retention_Option_Changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Retention Period Action Option Changed in Managed Folder Settings	CA_Event__Deleted_Item_Retention_Period_Action_Option_Changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Retention Period Changed	CA_Event__Deleted_Item_Retention_Period_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Retention Period Changed in Managed Folder Settings	CA_Event__Deleted_Item_Retention_Period_Changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Retention Period Start Option Changed in Managed Folder Settings	CA_Event__Deleted_Item_Retention_Period_Start_Option_Changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deleted Item Retention Use Defaults Storage Option Changed	CA_Event__Deleted_Item_Retention_Use_Defaults_Storage_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Delivery Status Notification (DSN) code for Transport setting changed	CA_Event__Delivery_Status_Notification__DSN__code_for_Transport_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deliver to Both Forwarding Address and Mailbox Delivery Option Changed	CA_Event__Deliver_to_Both_Forwarding_Address_and_Mailbox_Delivery_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deny Access To This Computer From The Network policy changed	CA_Event__Deny_Access_To_This_Computer_From_The_Network_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deny Log On As A Batch Job policy changed	CA_Event__Deny_Log_On_As_A_Batch_Job_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deny Log On As A Service policy changed	CA_Event__Deny_Log_On_As_A_Service_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deny Log On Locally policy changed	CA_Event__Deny_Log_On_Locally_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deny Log On Through Terminal Services / Remote Desktop Services policy changed	CA_Event__Deny_Log_On_Through_Terminal_Services___Remote_Desktop_Services_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deny this user Terminal Services permission changed for local user	CA_Event__Deny_this_user_Terminal_Services_permission_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Department changed for user object	CA_Event__Department_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deprecation Announcement	CA_Event__Deprecation_Announcement_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Deprecation Final Support	CA_Event__Deprecation_Final_Support_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Description changed on user object	CA_Event__Description_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Detailed Tracking: Audit DPAPI Activity changed	CA_Event__Detailed_Tracking__Audit_DPAPI_Activity_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Detailed Tracking: Audit Process Creation changed	CA_Event__Detailed_Tracking__Audit_Process_Creation_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Detailed Tracking: Audit Process Termination changed	CA_Event__Detailed_Tracking__Audit_Process_Termination_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Detailed Tracking: Audit RPC Events changed	CA_Event__Detailed_Tracking__Audit_RPC_Events_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Devices: Allowed To Format And Eject Removable Media policy changed	CA_Event__Devices__Allowed_To_Format_And_Eject_Removable_Media_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Devices: Allow Undock Without Having To Logon policy changed	CA_Event__Devices__Allow_Undock_Without_Having_To_Logon_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Devices: Prevent Users From Installing Printer Drivers policy changed	CA_Event__Devices__Prevent_Users_From_Installing_Printer_Drivers_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Devices: Restrict CD-ROM Access To Locally Logged-On User Only policy changed	CA_Event__Devices__Restrict_CD_ROM_Access_To_Locally_Logged_On_User_Only_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Devices: Restrict Floppy Access To Locally Logged-On User Only policy changed	CA_Event__Devices__Restrict_Floppy_Access_To_Locally_Logged_On_User_Only_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Devices: Unsigned Driver Installation Behavior policy changed	CA_Event__Devices__Unsigned_Driver_Installation_Behavior_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DHCP disabled	CA_Event__DHCP_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DHCP enabled	CA_Event__DHCP_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dial-in Callback number changed for local user	CA_Event__Dial_in_Callback_number_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dial-in Callback Options changed for local user	CA_Event__Dial_in_Callback_Options_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dial-in Static IP address changed for local user	CA_Event__Dial_in_Static_IP_address_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dial-in Static routes changed for local user	CA_Event__Dial_in_Static_routes_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dial-in Verify Caller-ID changed for local user	CA_Event__Dial_in_Verify_Caller_ID_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dial Plan Added To UM Server	CA_Event__Dial_Plan_Added_To_UM_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dial Plan Removed From UM Server	CA_Event__Dial_Plan_Removed_From_UM_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Direct Report Added to user object	CA_Event__Direct_Report_Added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Direct Report Removed from user object	CA_Event__Direct_Report_Removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DisableNSRecordsAutoCreation	CA_Event__DisableNSRecordsAutoCreation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Disable Auto Reverse Zones setting changed	CA_Event__Disable_Auto_Reverse_Zones_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Disconnected session timeout changed for local user	CA_Event__Disconnected_session_timeout_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Disk size changed	CA_Event__Disk_size_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Display name changed on user object	CA_Event__Display_name_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Display Senders Name On Messages Option Changed In Remote Domain Definition	CA_Event__Display_Senders_Name_On_Messages_Option_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution list display name changed	CA_Event__Distribution_list_display_name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution list Expansion Server changed	CA_Event__Distribution_list_Expansion_Server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Accept messages only from senders in following list changed	CA_Event__Distribution_List___Accept_messages_only_from_senders_in_following_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Address list membership changed	CA_Event__Distribution_List___Address_list_membership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Alias changed	CA_Event__Distribution_List___Alias_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Bypass moderation list changed	CA_Event__Distribution_List___Bypass_moderation_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - created	CA_Event__Distribution_List___created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 10 changed	CA_Event__Distribution_List___Custom_Attribute_10_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 11 changed	CA_Event__Distribution_List___Custom_Attribute_11_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 12 changed	CA_Event__Distribution_List___Custom_Attribute_12_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 13 changed	CA_Event__Distribution_List___Custom_Attribute_13_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 14 changed	CA_Event__Distribution_List___Custom_Attribute_14_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 15 changed	CA_Event__Distribution_List___Custom_Attribute_15_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 1 changed	CA_Event__Distribution_List___Custom_Attribute_1_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 2 changed	CA_Event__Distribution_List___Custom_Attribute_2_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 3 changed	CA_Event__Distribution_List___Custom_Attribute_3_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 4 changed	CA_Event__Distribution_List___Custom_Attribute_4_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 5 changed	CA_Event__Distribution_List___Custom_Attribute_5_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 6 changed	CA_Event__Distribution_List___Custom_Attribute_6_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 7 changed	CA_Event__Distribution_List___Custom_Attribute_7_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 8 changed	CA_Event__Distribution_List___Custom_Attribute_8_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Custom Attribute 9 changed	CA_Event__Distribution_List___Custom_Attribute_9_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - deleted	CA_Event__Distribution_List___deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - disabled	CA_Event__Distribution_List___disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Display name changed	CA_Event__Distribution_List___Display_name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Email addresses changed	CA_Event__Distribution_List___Email_addresses_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - enabled	CA_Event__Distribution_List___enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Expansion Server changed	CA_Event__Distribution_List___Expansion_Server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Group moderator list changed	CA_Event__Distribution_List___Group_moderator_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Hidden from address lists changed	CA_Event__Distribution_List___Hidden_from_address_lists_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Managed by changed	CA_Event__Distribution_List___Managed_by_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Maximum message size changed	CA_Event__Distribution_List___Maximum_message_size_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Member depart restriction changed	CA_Event__Distribution_List___Member_depart_restriction_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Member join restriction changed	CA_Event__Distribution_List___Member_join_restriction_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Messages sent to this group have to be approved by moderator changed	CA_Event__Distribution_List___Messages_sent_to_this_group_have_to_be_approved_by_moderator_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Name changed	CA_Event__Distribution_List___Name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Name (pre-Windows 2000) changed	CA_Event__Distribution_List___Name__pre_Windows_2000__changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Primary SMTP address changed	CA_Event__Distribution_List___Primary_SMTP_address_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Reject messages from senders changed	CA_Event__Distribution_List___Reject_messages_from_senders_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Require sender authentication changed	CA_Event__Distribution_List___Require_sender_authentication_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - SendModerationNotifications changed	CA_Event__Distribution_List___SendModerationNotifications_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Send delivery reports to group manager changed	CA_Event__Distribution_List___Send_delivery_reports_to_group_manager_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Send delivery reports to originator changed	CA_Event__Distribution_List___Send_delivery_reports_to_originator_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Send out of office message to originator changed	CA_Event__Distribution_List___Send_out_of_office_message_to_originator_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Distribution List - Simple display name changed	CA_Event__Distribution_List___Simple_display_name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DIT location changed	CA_Event__DIT_location_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS AAAA record added	CA_Event__DNS_AAAA_record_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS AAAA record modified	CA_Event__DNS_AAAA_record_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS AAAA record removed	CA_Event__DNS_AAAA_record_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS A record added	CA_Event__DNS_A_record_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS A record modified	CA_Event__DNS_A_record_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS A record removed	CA_Event__DNS_A_record_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS CNAME record added	CA_Event__DNS_CNAME_record_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS CNAME record removed	CA_Event__DNS_CNAME_record_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS MX record added	CA_Event__DNS_MX_record_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS MX record removed	CA_Event__DNS_MX_record_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS PTR record added	CA_Event__DNS_PTR_record_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS PTR record removed	CA_Event__DNS_PTR_record_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS service added	CA_Event__DNS_service_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS service removed	CA_Event__DNS_service_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS SRV record added	CA_Event__DNS_SRV_record_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DNS SRV record removed	CA_Event__DNS_SRV_record_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document added	CA_Event__Document_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document checked in	CA_Event__Document_checked_in_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document checked out	CA_Event__Document_checked_out_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document check out canceled	CA_Event__Document_check_out_canceled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document deleted	CA_Event__Document_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document library added	CA_Event__Document_library_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document library deleted (empty)	CA_Event__Document_library_deleted__empty__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document library deleted (with contents)	CA_Event__Document_library_deleted__with_contents__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document library renamed	CA_Event__Document_library_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document library restored from recycle bin	CA_Event__Document_library_restored_from_recycle_bin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document metadata updated	CA_Event__Document_metadata_updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document moved	CA_Event__Document_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document renamed	CA_Event__Document_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document restored from recycle bin	CA_Event__Document_restored_from_recycle_bin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document updated	CA_Event__Document_updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document version deleted	CA_Event__Document_version_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Document viewed	CA_Event__Document_viewed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain added	CA_Event__Domain_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller added as preferred bridgehead server	CA_Event__Domain_controller_added_as_preferred_bridgehead_server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller added to domain	CA_Event__Domain_controller_added_to_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller added to OU	CA_Event__Domain_controller_added_to_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller moved to another OU	CA_Event__Domain_controller_moved_to_another_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller moved to site	CA_Event__Domain_controller_moved_to_site_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller removed as preferred bridgehead server	CA_Event__Domain_controller_removed_as_preferred_bridgehead_server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller removed from domain	CA_Event__Domain_controller_removed_from_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller removed from OU	CA_Event__Domain_controller_removed_from_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain controller renamed	CA_Event__Domain_controller_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Controller service pack applied	CA_Event__Domain_Controller_service_pack_applied_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Controller service pack rolled back	CA_Event__Domain_Controller_service_pack_rolled_back_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Controller: Allow Server Operators To Schedule Tasks policy changed	CA_Event__Domain_Controller__Allow_Server_Operators_To_Schedule_Tasks_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Controller: LDAP Server Signing Requirements policy changed	CA_Event__Domain_Controller__LDAP_Server_Signing_Requirements_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Controller: Refuse Machine Account Password Changes policy changed	CA_Event__Domain_Controller__Refuse_Machine_Account_Password_Changes_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain FSMO role owner moved	CA_Event__Domain_FSMO_role_owner_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain functional level changed	CA_Event__Domain_functional_level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain group policy order changed	CA_Event__Domain_group_policy_order_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Member: Digitally Encrypt Or Sign Secure Channel Data (Always) policy changed	CA_Event__Domain_Member__Digitally_Encrypt_Or_Sign_Secure_Channel_Data__Always__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Member: Digitally Encrypt Secure Channel Data (When Possible) policy changed	CA_Event__Domain_Member__Digitally_Encrypt_Secure_Channel_Data__When_Possible__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Member: Digitally Sign Secure Channel Data (When Possible) policy changed	CA_Event__Domain_Member__Digitally_Sign_Secure_Channel_Data__When_Possible__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Member: Disable Machine Account Password Changes policy changed	CA_Event__Domain_Member__Disable_Machine_Account_Password_Changes_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Member: Maximum Machine Account Password Age policy changed	CA_Event__Domain_Member__Maximum_Machine_Account_Password_Age_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain Member: Require Strong (Windows 2000 Or Later) Session Key policy changed	CA_Event__Domain_Member__Require_Strong__Windows_2000_Or_Later__Session_Key_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain removed	CA_Event__Domain_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Domain user renamed	CA_Event__Domain_user_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Mount This Database At Start-Up changed for Mailbox Database	CA_Event__Do_Not_Mount_This_Database_At_Start_Up_changed_for_Mailbox_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Mount This Store At Start-Up changed for Mailbox store	CA_Event__Do_Not_Mount_This_Store_At_Start_Up_changed_for_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Mount This Store At Start-Up Changed for Public Folders Database	CA_Event__Do_Not_Mount_This_Store_At_Start_Up_Changed_for_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Mount This Store At Start-Up Changed in Public Store	CA_Event__Do_Not_Mount_This_Store_At_Start_Up_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Permanently Delete Items Until Backed Up changed for Mailbox database	CA_Event__Do_Not_Permanently_Delete_Items_Until_Backed_Up_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Permanently Delete Items Until Backed Up Changed in Public Folders Database	CA_Event__Do_Not_Permanently_Delete_Items_Until_Backed_Up_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Permanently Delete Items Until Backed Up Changed in Public Store	CA_Event__Do_Not_Permanently_Delete_Items_Until_Backed_Up_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Do Not Permanently Delete Mailboxes Until Backed Up changed in Mailbox store	CA_Event__Do_Not_Permanently_Delete_Mailboxes_Until_Backed_Up_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Disabled	CA_Event__Drs_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Enabled	CA_Event__Drs_Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Entered Standby Mode	CA_Event__Drs_Entered_Standby_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Entering Standby Mode Event	CA_Event__Drs_Entering_Standby_Mode_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Exited Standby Mode	CA_Event__Drs_Exited_Standby_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Exiting Standby Mode Event	CA_Event__Drs_Exiting_Standby_Mode_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Exit Standby Mode Failed	CA_Event__Drs_Exit_Standby_Mode_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Invocation Failed	CA_Event__Drs_Invocation_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Recovered From Failure	CA_Event__Drs_Recovered_From_Failure_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Resource Configure Failed	CA_Event__Drs_Resource_Configure_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Resource Configure Synced	CA_Event__Drs_Resource_Configure_Synced_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Rule Compliance Event	CA_Event__Drs_Rule_Compliance_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Rule Violation Event	CA_Event__Drs_Rule_Violation_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Vm Migrated	CA_Event__Drs_Vm_Migrated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Drs Vm Powered On	CA_Event__Drs_Vm_Powered_On_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DS Access: Audit Detailed Directory Service Replication changed	CA_Event__DS_Access__Audit_Detailed_Directory_Service_Replication_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DS Access: Audit Directory Service Access changed	CA_Event__DS_Access__Audit_Directory_Service_Access_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DS Access: Audit Directory Service Changes changed	CA_Event__DS_Access__Audit_Directory_Service_Changes_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DS Access: Audit Directory Service Replication changed	CA_Event__DS_Access__Audit_Directory_Service_Replication_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DS database logging and recover option changed	CA_Event__DS_database_logging_and_recover_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DS hierarchy table evaluation interval changed	CA_Event__DS_hierarchy_table_evaluation_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DS log file location changed	CA_Event__DS_log_file_location_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Close Connection	CA_Event__DTCTransaction___Close_Connection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Creating a new DTC Transaction	CA_Event__DTCTransaction___Creating_a_new_DTC_Transaction_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Enlisting in a DTC Transaction	CA_Event__DTCTransaction___Enlisting_in_a_DTC_Transaction_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Get Address	CA_Event__DTCTransaction___Get_Address_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Internal Abort	CA_Event__DTCTransaction___Internal_Abort_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Internal Active	CA_Event__DTCTransaction___Internal_Active_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Internal Commit	CA_Event__DTCTransaction___Internal_Commit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Preparing Transaction	CA_Event__DTCTransaction___Preparing_Transaction_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Propagate Transaction	CA_Event__DTCTransaction___Propagate_Transaction_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - TM Failed While in Prepared State	CA_Event__DTCTransaction___TM_Failed_While_in_Prepared_State_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Transaction is Aborting	CA_Event__DTCTransaction___Transaction_is_Aborting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Transaction is Committing	CA_Event__DTCTransaction___Transaction_is_Committing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Transaction is Prepared	CA_Event__DTCTransaction___Transaction_is_Prepared_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DTCTransaction - Unknown	CA_Event__DTCTransaction___Unknown_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Duplicate Ip Detected	CA_Event__Duplicate_Ip_Detected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DVPortgroup Created	CA_Event__DVPortgroup_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DVPortgroup Destroyed	CA_Event__DVPortgroup_Destroyed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DVPortgroup Event	CA_Event__DVPortgroup_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DVPortgroup Reconfigured	CA_Event__DVPortgroup_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: DVPortgroup Renamed	CA_Event__DVPortgroup_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Created	CA_Event__Dvs_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Destroyed	CA_Event__Dvs_Destroyed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Event	CA_Event__Dvs_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Host Back In Sync Event	CA_Event__Dvs_Host_Back_In_Sync_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Host Joined	CA_Event__Dvs_Host_Joined_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Host Left Event	CA_Event__Dvs_Host_Left_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Host Status Updated	CA_Event__Dvs_Host_Status_Updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Host Went Out Of Sync Event	CA_Event__Dvs_Host_Went_Out_Of_Sync_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Merged	CA_Event__Dvs_Merged_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Blocked	CA_Event__Dvs_Port_Blocked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Connected	CA_Event__Dvs_Port_Connected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Created	CA_Event__Dvs_Port_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Deleted	CA_Event__Dvs_Port_Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Disconnected	CA_Event__Dvs_Port_Disconnected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Entered Passthru	CA_Event__Dvs_Port_Entered_Passthru_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Exited Passthru	CA_Event__Dvs_Port_Exited_Passthru_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Join Portgroup Event	CA_Event__Dvs_Port_Join_Portgroup_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Leave Portgroup Event	CA_Event__Dvs_Port_Leave_Portgroup_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Link Down Event	CA_Event__Dvs_Port_Link_Down_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Link Up Event	CA_Event__Dvs_Port_Link_Up_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Reconfigured	CA_Event__Dvs_Port_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Port Unblocked	CA_Event__Dvs_Port_Unblocked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Reconfigured	CA_Event__Dvs_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Renamed	CA_Event__Dvs_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Upgraded	CA_Event__Dvs_Upgraded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Upgrade Available Event	CA_Event__Dvs_Upgrade_Available_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Upgrade In Progress Event	CA_Event__Dvs_Upgrade_In_Progress_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dvs Upgrade Rejected	CA_Event__Dvs_Upgrade_Rejected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Edge Subscription Added To Organization Configuration	CA_Event__Edge_Subscription_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Edge Subscription Removed From Organization Configuration	CA_Event__Edge_Subscription_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email addresses changed for group	CA_Event__Email_addresses_changed_for_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email addresses changed for user	CA_Event__Email_addresses_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Address Policy Added To Organization Configuration	CA_Event__Email_Address_Policy_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Address Policy Email Address Filter List changed	CA_Event__Email_Address_Policy_Email_Address_Filter_List_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Address Policy Priority changed	CA_Event__Email_Address_Policy_Priority_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Address Policy Query Filter changed	CA_Event__Email_Address_Policy_Query_Filter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Address Policy Removed From Organization Configuration	CA_Event__Email_Address_Policy_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Address Policy Renamed	CA_Event__Email_Address_Policy_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Address Policy Storage Filter changed	CA_Event__Email_Address_Policy_Storage_Filter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Reply To Changed	CA_Event__Email_Reply_To_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Email Subject Changed	CA_Event__Email_Subject_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC auditing cepp.conf changed	CA_Event__EMC_auditing_cepp.conf_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC auditing template added	CA_Event__EMC_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC auditing template disabled	CA_Event__EMC_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC auditing template enabled	CA_Event__EMC_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC auditing template removed	CA_Event__EMC_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File access rights changed	CA_Event__EMC_File_access_rights_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File contents written	CA_Event__EMC_File_contents_written_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File created	CA_Event__EMC_File_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File deleted	CA_Event__EMC_File_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File moved	CA_Event__EMC_File_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File opened	CA_Event__EMC_File_opened_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File ownership changed	CA_Event__EMC_File_ownership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC File renamed	CA_Event__EMC_File_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC Folder access rights changed	CA_Event__EMC_Folder_access_rights_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC Folder created	CA_Event__EMC_Folder_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC Folder deleted	CA_Event__EMC_Folder_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC Folder moved	CA_Event__EMC_Folder_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC Folder ownership changed	CA_Event__EMC_Folder_ownership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC Folder renamed	CA_Event__EMC_Folder_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC path added to auditing template	CA_Event__EMC_path_added_to_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC path changed in auditing template	CA_Event__EMC_path_changed_in_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: EMC path removed from auditing template	CA_Event__EMC_path_removed_from_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Circular Logging setting changed for mailbox database	CA_Event__Enable_Circular_Logging_setting_changed_for_mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Circular Logging setting changed in public folder database	CA_Event__Enable_Circular_Logging_setting_changed_in_public_folder_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Circular Logging setting changed in server storage group	CA_Event__Enable_Circular_Logging_setting_changed_in_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Computer And User Accounts To Be Trusted For Delegation changed	CA_Event__Enable_Computer_And_User_Accounts_To_Be_Trusted_For_Delegation_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Local Continuous Replication Status Changed	CA_Event__Enable_Local_Continuous_Replication_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable netmask ordering flag changed	CA_Event__Enable_netmask_ordering_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Remote Control changed for local user	CA_Event__Enable_Remote_Control_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Remote Control changed for user object	CA_Event__Enable_Remote_Control_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable scavenging of stale resource record setting changed	CA_Event__Enable_scavenging_of_stale_resource_record_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enable Server UM Messaging Status Changed	CA_Event__Enable_Server_UM_Messaging_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: End a Disconnected Session changed for user object	CA_Event__End_a_Disconnected_Session_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enforce Password History policy changed	CA_Event__Enforce_Password_History_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Enforce User Logon Restrictions policy changed	CA_Event__Enforce_User_Logon_Restrictions_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Entered Maintenance Mode	CA_Event__Entered_Maintenance_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Entered Standby Mode	CA_Event__Entered_Standby_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Entering Maintenance Mode Event	CA_Event__Entering_Maintenance_Mode_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Entering Standby Mode Event	CA_Event__Entering_Standby_Mode_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Entry Added To Send On Behalf Of Delivery Option	CA_Event__Entry_Added_To_Send_On_Behalf_Of_Delivery_Option_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Entry Removed From Send On Behalf Of Delivery Option	CA_Event__Entry_Removed_From_Send_On_Behalf_Of_Delivery_Option_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Error Logged	CA_Event__Error_Logged_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Error Upgrade Event	CA_Event__Error_Upgrade_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Event Ex	CA_Event__Event_Ex_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Event Logged	CA_Event__Event_Logged_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Event logging changed	CA_Event__Event_logging_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Event Log Level changed	CA_Event__Event_Log_Level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exception	CA_Event__Exception_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange ActiveSync Option Changed	CA_Event__Exchange_ActiveSync_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Cmdlet Executed	CA_Event__Exchange_Cmdlet_Executed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange container added to protection template	CA_Event__Exchange_container_added_to_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange container removed from protection template	CA_Event__Exchange_container_removed_from_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange database location changed for Mailbox store	CA_Event__Exchange_database_location_changed_for_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Database Location Changed in Public Store	CA_Event__Exchange_Database_Location_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange mailbox added to monitoring	CA_Event__Exchange_mailbox_added_to_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange mailbox attribute changed	CA_Event__Exchange_mailbox_attribute_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange mailbox disabled	CA_Event__Exchange_mailbox_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange mailbox enabled	CA_Event__Exchange_mailbox_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange mailbox removed from monitoring	CA_Event__Exchange_mailbox_removed_from_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange protection template added	CA_Event__Exchange_protection_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange protection template disabled	CA_Event__Exchange_protection_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange protection template enabled	CA_Event__Exchange_protection_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange protection template removed	CA_Event__Exchange_protection_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Server Authentication Option changed on Receive Connector	CA_Event__Exchange_Server_Authentication_Option_changed_on_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Server Database Availability Group Membership Changed	CA_Event__Exchange_Server_Database_Availability_Group_Membership_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange shared mailbox auto detection disabled	CA_Event__Exchange_shared_mailbox_auto_detection_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange shared mailbox auto detection enabled	CA_Event__Exchange_shared_mailbox_auto_detection_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Simple Display Name (Alias) changed	CA_Event__Exchange_Simple_Display_Name__Alias__changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Spill - Begin	CA_Event__Exchange_Spill___Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Spill - End	CA_Event__Exchange_Spill___End_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange Streaming Database Location Changed in Public Store	CA_Event__Exchange_Streaming_Database_Location_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange user defined shared mailbox added	CA_Event__Exchange_user_defined_shared_mailbox_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange user defined shared mailbox attribute changed	CA_Event__Exchange_user_defined_shared_mailbox_attribute_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange user defined shared mailbox disabled	CA_Event__Exchange_user_defined_shared_mailbox_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange user defined shared mailbox enabled	CA_Event__Exchange_user_defined_shared_mailbox_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exchange user defined shared mailbox removed	CA_Event__Exchange_user_defined_shared_mailbox_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account added to exclusion accounts list	CA_Event__Excluded_account_added_to_exclusion_accounts_list_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account event class added to monitoring	CA_Event__Excluded_account_event_class_added_to_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account event class removed from monitoring	CA_Event__Excluded_account_event_class_removed_from_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account facility added to monitoring	CA_Event__Excluded_account_facility_added_to_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account facility removed from monitoring	CA_Event__Excluded_account_facility_removed_from_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account removed from exclusion accounts list	CA_Event__Excluded_account_removed_from_exclusion_accounts_list_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account template added	CA_Event__Excluded_account_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account template added to agent configuration	CA_Event__Excluded_account_template_added_to_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account template removed	CA_Event__Excluded_account_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Excluded account template removed from agent configuration	CA_Event__Excluded_account_template_removed_from_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Execution Warnings - Query Timeout	CA_Event__Execution_Warnings___Query_Timeout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Execution Warnings - Query Wait	CA_Event__Execution_Warnings___Query_Wait_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exec Prepared SQL	CA_Event__Exec_Prepared_SQL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exited Standby Mode	CA_Event__Exited_Standby_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exiting Standby Mode Event	CA_Event__Exiting_Standby_Mode_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exit Maintenance Mode Event	CA_Event__Exit_Maintenance_Mode_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Exit Standby Mode Failed	CA_Event__Exit_Standby_Mode_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Expires after period changed	CA_Event__Expires_after_period_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Extended	CA_Event__Extended_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Extended access right added	CA_Event__Extended_access_right_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Extended access right removed	CA_Event__Extended_access_right_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Extension Associated with UM Auto Attendant	CA_Event__Extension_Associated_with_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Extension Disassociated from UM Auto Attendant	CA_Event__Extension_Disassociated_from_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Externally Secured Authentication Option changed on Receive Connector	CA_Event__Externally_Secured_Authentication_Option_changed_on_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: External DNS Lookup Option Changed on Send Connector	CA_Event__External_DNS_Lookup_Option_Changed_on_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: External Postmaster Address setting changed	CA_Event__External_Postmaster_Address_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Company Filter	CA_Event__E_Mail_Address_Policy___Company_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Created	CA_Event__E_Mail_Address_Policy___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Custom Attribute Filter	CA_Event__E_Mail_Address_Policy___Custom_Attribute_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Deleted	CA_Event__E_Mail_Address_Policy___Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Department Filter	CA_Event__E_Mail_Address_Policy___Department_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Disabled E-Mail Address Templates	CA_Event__E_Mail_Address_Policy___Disabled_E_Mail_Address_Templates_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - E-Mail Address Templates	CA_Event__E_Mail_Address_Policy___E_Mail_Address_Templates_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Included Recipient Types	CA_Event__E_Mail_Address_Policy___Included_Recipient_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Primary SMTP E-Mail Address Template	CA_Event__E_Mail_Address_Policy___Primary_SMTP_E_Mail_Address_Template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Priority	CA_Event__E_Mail_Address_Policy___Priority_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Recipient Container	CA_Event__E_Mail_Address_Policy___Recipient_Container_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Recipient Filter	CA_Event__E_Mail_Address_Policy___Recipient_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Renamed	CA_Event__E_Mail_Address_Policy___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - State/Province Filter	CA_Event__E_Mail_Address_Policy___State_Province_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: E-Mail Address Policy - Updated	CA_Event__E_Mail_Address_Policy___Updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed file access (NTFS permissions)	CA_Event__Failed_file_access__NTFS_permissions__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed file access (Quest lockdown)	CA_Event__Failed_file_access__Quest_lockdown__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed folder access (NTFS permissions)	CA_Event__Failed_folder_access__NTFS_permissions__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed folder access (Quest lockdown)	CA_Event__Failed_folder_access__Quest_lockdown__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed Group Policy Container Access (Quest lockdown)	CA_Event__Failed_Group_Policy_Container_Access__Quest_lockdown__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed share access (NTFS permissions)	CA_Event__Failed_share_access__NTFS_permissions__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed share access (Quest lockdown)	CA_Event__Failed_share_access__Quest_lockdown__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failed Starter Group Policy Container Access (Quest lockdown)	CA_Event__Failed_Starter_Group_Policy_Container_Access__Quest_lockdown__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Failover Level Restored	CA_Event__Failover_Level_Restored_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Fail on load flag changed	CA_Event__Fail_on_load_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Fallback Auto Attendant Changed for UM Auto Attendant	CA_Event__Fallback_Auto_Attendant_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Fax Identity Changed In UM Mailbox Policy	CA_Event__Fax_Identity_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Fax Message Text Changed In UM Mailbox Policy	CA_Event__Fax_Message_Text_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Fax Number changed on user object	CA_Event__Fax_Number_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File access rights changed	CA_Event__File_access_rights_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File attribute changed	CA_Event__File_attribute_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File auditing changed	CA_Event__File_auditing_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File central access policy changed	CA_Event__File_central_access_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File classification changed	CA_Event__File_classification_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File created	CA_Event__File_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File deleted	CA_Event__File_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File last write changed	CA_Event__File_last_write_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File moved	CA_Event__File_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File opened	CA_Event__File_opened_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File or folder added to File System policy	CA_Event__File_or_folder_added_to_File_System_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File or folder changed in File System policy	CA_Event__File_or_folder_changed_in_File_System_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File or folder removed from File System policy	CA_Event__File_or_folder_removed_from_File_System_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File ownership changed	CA_Event__File_ownership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File protection template added to agent configuration	CA_Event__File_protection_template_added_to_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File renamed	CA_Event__File_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system auditing template added	CA_Event__File_system_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system auditing template added to agent configuration	CA_Event__File_system_auditing_template_added_to_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system auditing template disabled	CA_Event__File_system_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system auditing template enabled	CA_Event__File_system_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system auditing template removed	CA_Event__File_system_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system auditing template removed from agent configuration	CA_Event__File_system_auditing_template_removed_from_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system path added to auditing template	CA_Event__File_system_path_added_to_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system path added to protection template	CA_Event__File_system_path_added_to_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system path changed in auditing template	CA_Event__File_system_path_changed_in_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system path changed in protection template	CA_Event__File_system_path_changed_in_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system path removed from auditing template	CA_Event__File_system_path_removed_from_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system path removed from protection template	CA_Event__File_system_path_removed_from_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system protection template added	CA_Event__File_system_protection_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system protection template disabled	CA_Event__File_system_protection_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system protection template enabled	CA_Event__File_system_protection_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system protection template removed	CA_Event__File_system_protection_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: File system protection template removed from agent configuration	CA_Event__File_system_protection_template_removed_from_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: First name changed on user object	CA_Event__First_name_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder access rights changed	CA_Event__Folder_access_rights_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder attribute changed	CA_Event__Folder_attribute_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder auditing changed	CA_Event__Folder_auditing_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder central access policy changed	CA_Event__Folder_central_access_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder classification changed	CA_Event__Folder_classification_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Copied by Non-Owner	CA_Event__Folder_Copied_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Copied by Owner	CA_Event__Folder_Copied_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Copied in Shared Mailbox	CA_Event__Folder_Copied_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder created	CA_Event__Folder_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Created by Non-Owner	CA_Event__Folder_Created_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Created by Owner	CA_Event__Folder_Created_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Created in Shared Mailbox	CA_Event__Folder_Created_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder deleted	CA_Event__Folder_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Deleted by Non-Owner	CA_Event__Folder_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Deleted by Owner	CA_Event__Folder_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Deleted in Shared Mailbox	CA_Event__Folder_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder List Changed In Managed Folder Mailbox Policy	CA_Event__Folder_List_Changed_In_Managed_Folder_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder moved	CA_Event__Folder_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Moved by Non-Owner	CA_Event__Folder_Moved_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Moved by Owner	CA_Event__Folder_Moved_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Moved in Shared Mailbox	CA_Event__Folder_Moved_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder opened	CA_Event__Folder_opened_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder ownership changed	CA_Event__Folder_ownership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Permanently Deleted by Non-Owner	CA_Event__Folder_Permanently_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Permanently Deleted by Owner	CA_Event__Folder_Permanently_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Permanently Deleted in Shared Mailbox	CA_Event__Folder_Permanently_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder renamed	CA_Event__Folder_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Renamed by Non-Owner	CA_Event__Folder_Renamed_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Renamed by Owner	CA_Event__Folder_Renamed_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Folder Renamed in Shared Mailbox	CA_Event__Folder_Renamed_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Force Shutdown From A Remote System policy changed	CA_Event__Force_Shutdown_From_A_Remote_System_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Forest functional level changed	CA_Event__Forest_functional_level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Forwarders list changed	CA_Event__Forwarders_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Forwarder timeout changed	CA_Event__Forwarder_timeout_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Forwarding Address Delivery Option Changed	CA_Event__Forwarding_Address_Delivery_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Forward Delegations setting changed	CA_Event__Forward_Delegations_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS access check changed	CA_Event__FRS_access_check_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS Directory exclusion filter list changed on Domain Controller	CA_Event__FRS_Directory_exclusion_filter_list_changed_on_Domain_Controller_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS Directory exclusion filter list changed on Replica Set	CA_Event__FRS_Directory_exclusion_filter_list_changed_on_Replica_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS File exclusion filter list changed for Replica Set	CA_Event__FRS_File_exclusion_filter_list_changed_for_Replica_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS File exclusion filter list changed on Domain Controller	CA_Event__FRS_File_exclusion_filter_list_changed_on_Domain_Controller_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS Mutual authentication setting changed	CA_Event__FRS_Mutual_authentication_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS RPC TCP/IP port assignment changed	CA_Event__FRS_RPC_TCP_IP_port_assignment_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS Staging space limit changed	CA_Event__FRS_Staging_space_limit_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FRS Working directory changed	CA_Event__FRS_Working_directory_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FT:Crawl Aborted	CA_Event__FT_Crawl_Aborted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FT:Crawl Started	CA_Event__FT_Crawl_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: FT:Crawl Stopped	CA_Event__FT_Crawl_Stopped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: GC added	CA_Event__GC_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: GC removed	CA_Event__GC_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: General Event	CA_Event__General_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: General Host Error Event	CA_Event__General_Host_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: General Host Info Event	CA_Event__General_Host_Info_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: General Host Warning Event	CA_Event__General_Host_Warning_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: General Vm Error Event	CA_Event__General_Vm_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: General Vm Info Event	CA_Event__General_Vm_Info_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: General Vm Warning Event	CA_Event__General_Vm_Warning_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Generate Security Audits policy changed	CA_Event__Generate_Security_Audits_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Ghost Dvs Proxy Switch Detected	CA_Event__Ghost_Dvs_Proxy_Switch_Detected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Ghost Dvs Proxy Switch Removed	CA_Event__Ghost_Dvs_Proxy_Switch_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Company Filter	CA_Event__Global_Address_List___Company_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Created	CA_Event__Global_Address_List___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Custom Attribute Filter	CA_Event__Global_Address_List___Custom_Attribute_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Deleted	CA_Event__Global_Address_List___Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Department Filter	CA_Event__Global_Address_List___Department_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Included Recipient Types	CA_Event__Global_Address_List___Included_Recipient_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Recipient Container	CA_Event__Global_Address_List___Recipient_Container_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Recipient Filter	CA_Event__Global_Address_List___Recipient_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Renamed	CA_Event__Global_Address_List___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - State/Province Filter	CA_Event__Global_Address_List___State_Province_Filter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Address List - Updated	CA_Event__Global_Address_List___Updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Catalog lookup for Logon requirement changed	CA_Event__Global_Catalog_lookup_for_Logon_requirement_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Message Changed	CA_Event__Global_Message_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Object Access Auditing: File system changed	CA_Event__Global_Object_Access_Auditing__File_system_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Global Object Access Auditing: Registry changed	CA_Event__Global_Object_Access_Auditing__Registry_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Greeting Changed in UM Dial Plan	CA_Event__Greeting_Changed_in_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group added for group membership expansion	CA_Event__Group_added_for_group_membership_expansion_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group added to "Member Of Group" monitoring	CA_Event__Group_added_to_quotMember_Of_Groupquot_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group added to the Restricted Group policy	CA_Event__Group_added_to_the_Restricted_Group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group membership expansion changed	CA_Event__Group_membership_expansion_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group member-of added	CA_Event__Group_member_of_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group member-of removed	CA_Event__Group_member_of_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group object added	CA_Event__Group_object_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group object moved	CA_Event__Group_object_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group object removed	CA_Event__Group_object_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group Policy added to protection template	CA_Event__Group_Policy_added_to_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy block inheritance setting changed on domain	CA_Event__Group_policy_block_inheritance_setting_changed_on_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy block inheritance setting changed on OU	CA_Event__Group_policy_block_inheritance_setting_changed_on_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy block inheritance setting changed on site	CA_Event__Group_policy_block_inheritance_setting_changed_on_site_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group Policy changed in protection template	CA_Event__Group_Policy_changed_in_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy Disabled setting on domain changed	CA_Event__Group_policy_Disabled_setting_on_domain_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy Disabled setting on OU changed	CA_Event__Group_policy_Disabled_setting_on_OU_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy Disabled setting on site changed	CA_Event__Group_policy_Disabled_setting_on_site_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy disable computer configuration flag changed	CA_Event__Group_policy_disable_computer_configuration_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy disable user configuration flag changed	CA_Event__Group_policy_disable_user_configuration_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy linked	CA_Event__Group_policy_linked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy link added to OU	CA_Event__Group_policy_link_added_to_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy link added to site	CA_Event__Group_policy_link_added_to_site_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy link removed from OU	CA_Event__Group_policy_link_removed_from_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy link removed from site	CA_Event__Group_policy_link_removed_from_site_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy link settings modified	CA_Event__Group_policy_link_settings_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy No Override setting changed on domain	CA_Event__Group_policy_No_Override_setting_changed_on_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy no override setting changed on OU	CA_Event__Group_policy_no_override_setting_changed_on_OU_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy no override setting changed on site	CA_Event__Group_policy_no_override_setting_changed_on_site_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy object added	CA_Event__Group_policy_object_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy object removed	CA_Event__Group_policy_object_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy object renamed	CA_Event__Group_policy_object_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group Policy protection template added	CA_Event__Group_Policy_protection_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group Policy protection template disabled	CA_Event__Group_Policy_protection_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group Policy protection template enabled	CA_Event__Group_Policy_protection_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group Policy protection template removed	CA_Event__Group_Policy_protection_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group Policy removed from protection template	CA_Event__Group_Policy_removed_from_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy unlinked	CA_Event__Group_policy_unlinked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group policy WMI Filter changed	CA_Event__Group_policy_WMI_Filter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group removed from group membership expansion	CA_Event__Group_removed_from_group_membership_expansion_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group removed from "Member Of Group" monitoring	CA_Event__Group_removed_from_quotMember_Of_Groupquot_monitoring_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group removed from the Restricted Group policy	CA_Event__Group_removed_from_the_Restricted_Group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group renamed	CA_Event__Group_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group samAccountName changed	CA_Event__Group_samAccountName_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Group type changed	CA_Event__Group_type_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Guest account disabled	CA_Event__Guest_account_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Guest account enabled	CA_Event__Guest_account_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hash Warning - Bailout	CA_Event__Hash_Warning___Bailout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hash Warning - Recursion	CA_Event__Hash_Warning___Recursion_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Health Status Changed	CA_Event__Health_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hide From Exchange Address Lists option changed	CA_Event__Hide_From_Exchange_Address_Lists_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hide Group from Exchange Address Lists changed	CA_Event__Hide_Group_from_Exchange_Address_Lists_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Holiday Added To UM Auto Attendant	CA_Event__Holiday_Added_To_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Holiday Changed In UM Auto Attendant	CA_Event__Holiday_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Holiday Removed From UM Auto Attendant	CA_Event__Holiday_Removed_From_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Home Folder changed on user object	CA_Event__Home_Folder_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Home folder mapped drive changed for local user	CA_Event__Home_folder_mapped_drive_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Home Folder Mapped Drive changed on user object	CA_Event__Home_Folder_Mapped_Drive_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Home folder path changed for local user	CA_Event__Home_folder_path_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Home Telephone Number changed on user object	CA_Event__Home_Telephone_Number_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Added	CA_Event__Host_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Add Failed	CA_Event__Host_Add_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Admin Disable Event	CA_Event__Host_Admin_Disable_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Admin Enable Event	CA_Event__Host_Admin_Enable_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed	CA_Event__Host_Cnx_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Account Failed	CA_Event__Host_Cnx_Failed_Account_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Already Managed	CA_Event__Host_Cnx_Failed_Already_Managed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Bad Ccagent	CA_Event__Host_Cnx_Failed_Bad_Ccagent_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Bad Username	CA_Event__Host_Cnx_Failed_Bad_Username_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Bad Version	CA_Event__Host_Cnx_Failed_Bad_Version_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Ccagent Upgrade	CA_Event__Host_Cnx_Failed_Ccagent_Upgrade_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Network Error	CA_Event__Host_Cnx_Failed_Network_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Not Found	CA_Event__Host_Cnx_Failed_Not_Found_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed No Access	CA_Event__Host_Cnx_Failed_No_Access_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed No Connection	CA_Event__Host_Cnx_Failed_No_Connection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed No License	CA_Event__Host_Cnx_Failed_No_License_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Cnx Failed Timeout	CA_Event__Host_Cnx_Failed_Timeout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Compliance Checked	CA_Event__Host_Compliance_Checked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Compliant Event	CA_Event__Host_Compliant_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Config Applied	CA_Event__Host_Config_Applied_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Connected	CA_Event__Host_Connected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Connection Lost Event	CA_Event__Host_Connection_Lost_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Das Disabled	CA_Event__Host_Das_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Das Disabling Event	CA_Event__Host_Das_Disabling_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Das Enabled	CA_Event__Host_Das_Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Das Enabling Event	CA_Event__Host_Das_Enabling_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Das Error Event	CA_Event__Host_Das_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Das Event	CA_Event__Host_Das_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Das Ok Event	CA_Event__Host_Das_Ok_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Disconnected	CA_Event__Host_Disconnected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Enable Admin Failed	CA_Event__Host_Enable_Admin_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Event	CA_Event__Host_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Extra Networks Event	CA_Event__Host_Extra_Networks_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Get Short Name Failed	CA_Event__Host_Get_Short_Name_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Inventory Full Event	CA_Event__Host_Inventory_Full_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Inventory Unreadable Event	CA_Event__Host_Inventory_Unreadable_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Ip Changed	CA_Event__Host_Ip_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Ip Inconsistent Event	CA_Event__Host_Ip_Inconsistent_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Ip To Short Name Failed	CA_Event__Host_Ip_To_Short_Name_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Isolation Ip Ping Failed	CA_Event__Host_Isolation_Ip_Ping_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host License Expired	CA_Event__Host_License_Expired_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Missing Networks Event	CA_Event__Host_Missing_Networks_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Monitoring State Changed	CA_Event__Host_Monitoring_State_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Non Compliant Event	CA_Event__Host_Non_Compliant_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Not In Cluster Event	CA_Event__Host_Not_In_Cluster_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host No Available Networks Event	CA_Event__Host_No_Available_Networks_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host No HAEnabled Port Groups	CA_Event__Host_No_HAEnabled_Port_Groups_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host No Redundant Management Network Event	CA_Event__Host_No_Redundant_Management_Network_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Overcommitted	CA_Event__Host_Overcommitted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Primary Agent Not Short Name Event	CA_Event__Host_Primary_Agent_Not_Short_Name_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Profile Applied	CA_Event__Host_Profile_Applied_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Reconnection Failed	CA_Event__Host_Reconnection_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Removed	CA_Event__Host_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Short Name Inconsistent Event	CA_Event__Host_Short_Name_Inconsistent_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Short Name To Ip Failed	CA_Event__Host_Short_Name_To_Ip_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Shutdown Event	CA_Event__Host_Shutdown_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Status Changed	CA_Event__Host_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Sync Failed	CA_Event__Host_Sync_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Upgrade Failed	CA_Event__Host_Upgrade_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host User World Swap Not Enabled	CA_Event__Host_User_World_Swap_Not_Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Vnic Connected To Customized DVPort	CA_Event__Host_Vnic_Connected_To_Customized_DVPort_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Wwn Changed	CA_Event__Host_Wwn_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Host Wwn Conflict Event	CA_Event__Host_Wwn_Conflict_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hotfix applied	CA_Event__Hotfix_applied_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hotfix rolled back	CA_Event__Hotfix_rolled_back_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hunt Group Added To UM IP Gateway	CA_Event__Hunt_Group_Added_To_UM_IP_Gateway_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Hunt Group Removed From UM IP Gateway	CA_Event__Hunt_Group_Removed_From_UM_IP_Gateway_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Idle session limit changed for local user	CA_Event__Idle_session_limit_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Idle Session Limit changed for user object	CA_Event__Idle_Session_Limit_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Ignore link schedules option changed	CA_Event__Ignore_link_schedules_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Impersonate A Client After Authentication policy changed	CA_Event__Impersonate_A_Client_After_Authentication_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Inbox Opened by Non-Owner	CA_Event__Inbox_Opened_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Inbox Opened by Owner	CA_Event__Inbox_Opened_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Incorrect Host Information Event	CA_Event__Incorrect_Host_Information_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Incorrect PIN Mailbox Lockout Setting Changed In UM Mailbox Policy	CA_Event__Incorrect_PIN_Mailbox_Lockout_Setting_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Incorrect PIN Reset Setting Changed In UM Mailbox Policy	CA_Event__Incorrect_PIN_Reset_Setting_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Increase a process working set	CA_Event__Increase_a_process_working_set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Increase Scheduling Priority policy changed	CA_Event__Increase_Scheduling_Priority_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Informational Announcement Changed for UM Auto Attendant	CA_Event__Informational_Announcement_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Info Upgrade Event	CA_Event__Info_Upgrade_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Infrastructure FSMO Role Owner Moved	CA_Event__Infrastructure_FSMO_Role_Owner_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Initials changed on user object	CA_Event__Initials_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Input Failures Before Disconnect Changed In UM Dial Plan	CA_Event__Input_Failures_Before_Disconnect_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Input Idle Timeout Changed In UM Dial Plan	CA_Event__Input_Idle_Timeout_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Input Retries Changed In UM Dial Plan	CA_Event__Input_Retries_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Insufficient Failover Resources Event	CA_Event__Insufficient_Failover_Resources_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Integrated Windows Authentication Option changed on Receive Connector	CA_Event__Integrated_Windows_Authentication_Option_changed_on_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Do Not Display Last User Name policy changed	CA_Event__Interactive_Logon__Do_Not_Display_Last_User_Name_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Do Not Require CTRL+ALT+DEL policy changed	CA_Event__Interactive_Logon__Do_Not_Require_CTRLALTDEL_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Message Text For Users Attempting To Log On policy changed	CA_Event__Interactive_Logon__Message_Text_For_Users_Attempting_To_Log_On_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Message Title For Users Attempting To Log On changed	CA_Event__Interactive_Logon__Message_Title_For_Users_Attempting_To_Log_On_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Number Of Previous Logons To Cache (In Case Domain Controller Is Not Available) policy changed	CA_Event__Interactive_Logon__Number_Of_Previous_Logons_To_Cache__In_Case_Domain_Controller_Is_Not_Available__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Prompt User To Change Password Before Expiration policy changed	CA_Event__Interactive_Logon__Prompt_User_To_Change_Password_Before_Expiration_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: "Display user information when the session is locked" policy changed	CA_Event__Interactive_Logon__quotDisplay_user_information_when_the_session_is_lockedquot_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Require Domain Controller Authentication To Unlock Workstation policy changed	CA_Event__Interactive_Logon__Require_Domain_Controller_Authentication_To_Unlock_Workstation_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Require Smart Card policy changed	CA_Event__Interactive_Logon__Require_Smart_Card_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interactive Logon: Smart Card Removal Behavior policy changed	CA_Event__Interactive_Logon__Smart_Card_Removal_Behavior_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Intermediate Certificate Authorities added	CA_Event__Intermediate_Certificate_Authorities_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Intermediate Certificate Authorities changed	CA_Event__Intermediate_Certificate_Authorities_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Intermediate Certificate Authorities removed	CA_Event__Intermediate_Certificate_Authorities_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: International Access Code Changed In UM Dial Plan	CA_Event__International_Access_Code_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: International Number Format Changed In UM Dial Plan	CA_Event__International_Number_Format_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: International Rule Group Added To UM Dial Plan	CA_Event__International_Rule_Group_Added_To_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: International Rule Group Added To UM Mailbox Policy	CA_Event__International_Rule_Group_Added_To_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: International Rule Group Removed From UM Dial Plan	CA_Event__International_Rule_Group_Removed_From_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: International Rule Group Removed From UM Mailbox Policy	CA_Event__International_Rule_Group_Removed_From_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Intersite failures allowed parameter changed	CA_Event__Intersite_failures_allowed_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Interval changed	CA_Event__Interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Inter-site compression setting changed	CA_Event__Inter_site_compression_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Invalid Edition Event	CA_Event__Invalid_Edition_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: In-Country Number Format Changed In UM Dial Plan	CA_Event__In_Country_Number_Format_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: In-Country Rule Group Added To UM Dial Plan	CA_Event__In_Country_Rule_Group_Added_To_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: In-Country Rule Group Added To UM Mailbox Policy	CA_Event__In_Country_Rule_Group_Added_To_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: In-Country Rule Group Removed From UM Dial Plan	CA_Event__In_Country_Rule_Group_Removed_From_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: In-Country Rule Group Removed From UM Mailbox Policy	CA_Event__In_Country_Rule_Group_Removed_From_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IPSEC settings changed	CA_Event__IPSEC_settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP deny list entry added	CA_Event__IP_deny_list_entry_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP deny list entry removed	CA_Event__IP_deny_list_entry_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Phone Number changed on user object	CA_Event__IP_Phone_Number_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Filter Action created	CA_Event__IP_Security_Filter_Action_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Filter Action deleted	CA_Event__IP_Security_Filter_Action_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Filter Action Option changed	CA_Event__IP_Security_Filter_Action_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Filter Action Security Method changed	CA_Event__IP_Security_Filter_Action_Security_Method_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Filter List created	CA_Event__IP_Security_Filter_List_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Filter List deleted	CA_Event__IP_Security_Filter_List_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Filter List Option changed	CA_Event__IP_Security_Filter_List_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Policy assigned	CA_Event__IP_Security_Policy_assigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Policy created	CA_Event__IP_Security_Policy_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Policy deleted	CA_Event__IP_Security_Policy_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Policy Key Exchange Settings changed	CA_Event__IP_Security_Policy_Key_Exchange_Settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Policy Option changed	CA_Event__IP_Security_Policy_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Policy un-assigned	CA_Event__IP_Security_Policy_un_assigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Rule created	CA_Event__IP_Security_Rule_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Rule deleted	CA_Event__IP_Security_Rule_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Rule Filter Action changed	CA_Event__IP_Security_Rule_Filter_Action_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Rule Filter List changed	CA_Event__IP_Security_Rule_Filter_List_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IP Security Rule Option Changed	CA_Event__IP_Security_Rule_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IScsi Boot Failure Event	CA_Event__IScsi_Boot_Failure_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: IsSlave setting changed	CA_Event__IsSlave_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Issue Warning At (KB) Limit changed for mailbox database	CA_Event__Issue_Warning_At__KB__Limit_changed_for_mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Issue Warning At (KB) Limit changed in Mailbox store	CA_Event__Issue_Warning_At__KB__Limit_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Issue Warning at (KB) Limit Changed in Public Folders Database	CA_Event__Issue_Warning_at__KB__Limit_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Issue Warning at (KB) Limit Changed in Public Store	CA_Event__Issue_Warning_at__KB__Limit_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journaling Label changed in Managed Folder Settings	CA_Event__Journaling_Label_changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journaling Message Format changed in Managed Folder Settings	CA_Event__Journaling_Message_Format_changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journaling Option changed in Managed Folder Settings	CA_Event__Journaling_Option_changed_in_Managed_Folder_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journaling Rule Added To Organization Configuration	CA_Event__Journaling_Rule_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journaling Rule Changed	CA_Event__Journaling_Rule_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journaling Rule Removed From Organization Configuration	CA_Event__Journaling_Rule_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journaling Rule Renamed	CA_Event__Journaling_Rule_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Journal Recipient changed for Mailbox database	CA_Event__Journal_Recipient_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Junction point created	CA_Event__Junction_point_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Junction point deleted	CA_Event__Junction_point_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: KCC delay after startup changed	CA_Event__KCC_delay_after_startup_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: KCC site generator failover interval changed	CA_Event__KCC_site_generator_failover_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: KCC site generator renewal interval changed	CA_Event__KCC_site_generator_renewal_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: KCC update interval changed	CA_Event__KCC_update_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Keep Deleted Items For (days) limit changed for Mailbox database	CA_Event__Keep_Deleted_Items_For__days__limit_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Keep Deleted Items For (days) limit changed in Mailbox store	CA_Event__Keep_Deleted_Items_For__days__limit_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Keep Deleted Items For (Days) Limit Changed in Public Folders Database	CA_Event__Keep_Deleted_Items_For__Days__Limit_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Keep Deleted Items For (Days) Limit Changed in Public Store	CA_Event__Keep_Deleted_Items_For__Days__Limit_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Keep Deleted Mailboxes For (days) limit changed for Mailbox database	CA_Event__Keep_Deleted_Mailboxes_For__days__limit_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Keep Deleted Mailboxes For (days) limit changed in Mailbox store	CA_Event__Keep_Deleted_Mailboxes_For__days__limit_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Kerberos diagnostic log level changed	CA_Event__Kerberos_diagnostic_log_level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Language Changed In UM Auto Attendant	CA_Event__Language_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Last name changed on user object	CA_Event__Last_name_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Level of Control changed for user object	CA_Event__Level_of_Control_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: License Event	CA_Event__License_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: License Expired	CA_Event__License_Expired_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: License Non Compliance Event	CA_Event__License_Non_Compliance_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: License Restricted	CA_Event__License_Restricted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: License Server Available Event	CA_Event__License_Server_Available_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: License Server Unavailable Event	CA_Event__License_Server_Unavailable_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Line Wrap Column Changed In Remote Domain Definition	CA_Event__Line_Wrap_Column_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Linked Group Policy on domain changed	CA_Event__Linked_Group_Policy_on_domain_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Linked Group Policy on OU changed	CA_Event__Linked_Group_Policy_on_OU_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Linked Group Policy on site changed	CA_Event__Linked_Group_Policy_on_site_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Linked query policy for domain controller changed	CA_Event__Linked_query_policy_for_domain_controller_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Linked query policy object for site changed	CA_Event__Linked_query_policy_object_for_site_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Link cost changed	CA_Event__Link_cost_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Listen-on interfaces changed	CA_Event__Listen_on_interfaces_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List added	CA_Event__List_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List deleted (empty)	CA_Event__List_deleted__empty__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List deleted (with contents)	CA_Event__List_deleted__with_contents__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List item added	CA_Event__List_item_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List item attachment added	CA_Event__List_item_attachment_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List item attachment deleted	CA_Event__List_item_attachment_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List item deleted	CA_Event__List_item_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List item restored from recycle bin	CA_Event__List_item_restored_from_recycle_bin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List item updated	CA_Event__List_item_updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List item version deleted	CA_Event__List_item_version_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List renamed	CA_Event__List_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: List restored from recycle bin	CA_Event__List_restored_from_recycle_bin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Load And Unload Device Drivers policy changed	CA_Event__Load_And_Unload_Device_Drivers_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local Datastore Created	CA_Event__Local_Datastore_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local group added	CA_Event__Local_group_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local group removed	CA_Event__Local_group_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local group renamed	CA_Event__Local_group_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local share added	CA_Event__Local_share_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local share folder path changed	CA_Event__Local_share_folder_path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local share permissions changed	CA_Event__Local_share_permissions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local share removed	CA_Event__Local_share_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local TSMEnabled	CA_Event__Local_TSMEnabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local user account locked	CA_Event__Local_user_account_locked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local user account unlocked	CA_Event__Local_user_account_unlocked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local user added	CA_Event__Local_user_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local user badPwdCount changed	CA_Event__Local_user_badPwdCount_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local user logged on	CA_Event__Local_user_logged_on_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local user removed	CA_Event__Local_user_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Local user renamed	CA_Event__Local_user_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Locker Misconfigured	CA_Event__Locker_Misconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Locker Reconfigured	CA_Event__Locker_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Acquired	CA_Event__Lock_Acquired_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Cancel	CA_Event__Lock_Cancel_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Deadlock	CA_Event__Lock_Deadlock_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Deadlock Chain - Resource Type Exchange	CA_Event__Lock_Deadlock_Chain___Resource_Type_Exchange_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Deadlock Chain - Resource Type Lock	CA_Event__Lock_Deadlock_Chain___Resource_Type_Lock_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Escalation	CA_Event__Lock_Escalation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock Pages In Memory policy changed	CA_Event__Lock_Pages_In_Memory_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Released	CA_Event__Lock_Released_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Timeout	CA_Event__Lock_Timeout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Lock:Timeout (timeout > 0)	CA_Event__Lock_Timeout__timeout__0__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: LogFileMaxSize setting changed	CA_Event__LogFileMaxSize_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon Failure Count Changed In UM Dial Plan	CA_Event__Logon_Failure_Count_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit Account Lockout changed	CA_Event__Logon_Logoff__Audit_Account_Lockout_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit IPsec Extended Mode changed	CA_Event__Logon_Logoff__Audit_IPsec_Extended_Mode_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit IPsec Main Mode changed	CA_Event__Logon_Logoff__Audit_IPsec_Main_Mode_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit IPsec Quick Mode changed	CA_Event__Logon_Logoff__Audit_IPsec_Quick_Mode_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit Logoff changed	CA_Event__Logon_Logoff__Audit_Logoff_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit Logon changed	CA_Event__Logon_Logoff__Audit_Logon_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit Network Policy Server changed	CA_Event__Logon_Logoff__Audit_Network_Policy_Server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit Other Logon/Logoff Events changed	CA_Event__Logon_Logoff__Audit_Other_Logon_Logoff_Events_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon/Logoff: Audit Special Logon changed	CA_Event__Logon_Logoff__Audit_Special_Logon_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon program filename changed for local user	CA_Event__Logon_program_filename_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon program folder changed for local user	CA_Event__Logon_program_folder_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon script changed for local user	CA_Event__Logon_script_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Logon Script changed on user object	CA_Event__Logon_Script_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Log File Auto Grow	CA_Event__Log_File_Auto_Grow_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Log File Auto Shrink	CA_Event__Log_File_Auto_Shrink_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Log File Path changed	CA_Event__Log_File_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Log On As A Batch Job policy changed	CA_Event__Log_On_As_A_Batch_Job_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Log On As A Service policy changed	CA_Event__Log_On_As_A_Service_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Loose Wildcarding setting changed	CA_Event__Loose_Wildcarding_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox database created in organization	CA_Event__Mailbox_database_created_in_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox database removed from organization	CA_Event__Mailbox_database_removed_from_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox database renamed in organization	CA_Event__Mailbox_database_renamed_in_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Allow Overwrite by Restore	CA_Event__Mailbox_Database___Allow_Overwrite_by_Restore_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Background Database Maintenance	CA_Event__Mailbox_Database___Background_Database_Maintenance_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Circular Logging	CA_Event__Mailbox_Database___Circular_Logging_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Clean Initiated	CA_Event__Mailbox_Database___Clean_Initiated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Created	CA_Event__Mailbox_Database___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Data Move Replication Constraint	CA_Event__Mailbox_Database___Data_Move_Replication_Constraint_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Deleted Item Retention	CA_Event__Mailbox_Database___Deleted_Item_Retention_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Deleted Item Retention Until Backup	CA_Event__Mailbox_Database___Deleted_Item_Retention_Until_Backup_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Deleted Mailbox Retention	CA_Event__Mailbox_Database___Deleted_Mailbox_Retention_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - EDB File Path	CA_Event__Mailbox_Database___EDB_File_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Event History Retention Period	CA_Event__Mailbox_Database___Event_History_Retention_Period_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Exchange Search Indexing Enable/Disabled	CA_Event__Mailbox_Database___Exchange_Search_Indexing_Enable_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Issue Warning At	CA_Event__Mailbox_Database___Issue_Warning_At_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Journal Recipient	CA_Event__Mailbox_Database___Journal_Recipient_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Log Folder Path	CA_Event__Mailbox_Database___Log_Folder_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Mailbox Purged	CA_Event__Mailbox_Database___Mailbox_Purged_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Maintenance Schedule	CA_Event__Mailbox_Database___Maintenance_Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Mount At Startup	CA_Event__Mailbox_Database___Mount_At_Startup_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Offline Address Book	CA_Event__Mailbox_Database___Offline_Address_Book_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Prohibit Send and Receive At	CA_Event__Mailbox_Database___Prohibit_Send_and_Receive_At_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Prohibit Send At	CA_Event__Mailbox_Database___Prohibit_Send_At_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Provisioning Excluded	CA_Event__Mailbox_Database___Provisioning_Excluded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Provisioning Suspended	CA_Event__Mailbox_Database___Provisioning_Suspended_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Public Folder Database	CA_Event__Mailbox_Database___Public_Folder_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Quota Warning Message Schedule	CA_Event__Mailbox_Database___Quota_Warning_Message_Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Recoverable Items Folder Size	CA_Event__Mailbox_Database___Recoverable_Items_Folder_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Recoverable Items Folder Warning Size	CA_Event__Mailbox_Database___Recoverable_Items_Folder_Warning_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Removed	CA_Event__Mailbox_Database___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - Renamed	CA_Event__Mailbox_Database___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Database - RPC Client Access Servers	CA_Event__Mailbox_Database___RPC_Client_Access_Servers_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox disabled for user	CA_Event__Mailbox_disabled_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox enabled for user	CA_Event__Mailbox_enabled_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Enabled Text Changed In UM Mailbox Policy	CA_Event__Mailbox_Enabled_Text_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Folder Permissions Changed	CA_Event__Mailbox_Folder_Permissions_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox location changed for user	CA_Event__Mailbox_location_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox mobile settings changed	CA_Event__Mailbox_mobile_settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Opened by Non-Owner	CA_Event__Mailbox_Opened_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Opened by Owner	CA_Event__Mailbox_Opened_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Rights Changed for user	CA_Event__Mailbox_Rights_Changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Send As Rights Changed for user	CA_Event__Mailbox_Send_As_Rights_Changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Storage Send Limit changed for user	CA_Event__Mailbox_Storage_Send_Limit_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Storage Send/Receive Limit changed for user	CA_Event__Mailbox_Storage_Send_Receive_Limit_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Storage Warning Limit changed for user	CA_Event__Mailbox_Storage_Warning_Limit_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox store created in server storage group	CA_Event__Mailbox_store_created_in_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Store Dismounted	CA_Event__Mailbox_Store_Dismounted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox Store Mounted	CA_Event__Mailbox_Store_Mounted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox store removed from server storage group	CA_Event__Mailbox_store_removed_from_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox store renamed in server storage group	CA_Event__Mailbox_store_renamed_in_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - E-Mail Addresses	CA_Event__Mailbox___E_Mail_Addresses_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Move Request Created	CA_Event__Mailbox___Move_Request_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Move Request Property Changed	CA_Event__Mailbox___Move_Request_Property_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Move Request Removed	CA_Event__Mailbox___Move_Request_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Move Request Resumed	CA_Event__Mailbox___Move_Request_Resumed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Move Request Suspended	CA_Event__Mailbox___Move_Request_Suspended_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Owner Changed	CA_Event__Mailbox___Owner_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Permissions Changed	CA_Event__Mailbox___Permissions_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mailbox - Sharing Policy	CA_Event__Mailbox___Sharing_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mail disabled for group	CA_Event__Mail_disabled_for_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mail disabled for user	CA_Event__Mail_disabled_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mail enabled for group	CA_Event__Mail_enabled_for_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mail enabled for user	CA_Event__Mail_enabled_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder added to Organization Mailbox Configuration	CA_Event__Managed_Custom_Folder_added_to_Organization_Mailbox_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder Removed From Organization Mailbox Configuration	CA_Event__Managed_Custom_Folder_Removed_From_Organization_Mailbox_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder Renamed	CA_Event__Managed_Custom_Folder_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Base Folder Only	CA_Event__Managed_Custom_Folder___Base_Folder_Only_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Comment	CA_Event__Managed_Custom_Folder___Comment_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Created	CA_Event__Managed_Custom_Folder___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Folder Name	CA_Event__Managed_Custom_Folder___Folder_Name_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Localized Comment	CA_Event__Managed_Custom_Folder___Localized_Comment_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Localized Folder Name	CA_Event__Managed_Custom_Folder___Localized_Folder_Name_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Must Display Comment	CA_Event__Managed_Custom_Folder___Must_Display_Comment_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Removed	CA_Event__Managed_Custom_Folder___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Renamed	CA_Event__Managed_Custom_Folder___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Custom Folder - Storage Limit	CA_Event__Managed_Custom_Folder___Storage_Limit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder added to Organization Mailbox Configuration	CA_Event__Managed_Default_Folder_added_to_Organization_Mailbox_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder Removed From Organization Mailbox Configuration	CA_Event__Managed_Default_Folder_Removed_From_Organization_Mailbox_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder Renamed	CA_Event__Managed_Default_Folder_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder - Base Folder Only	CA_Event__Managed_Default_Folder___Base_Folder_Only_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder - Comment	CA_Event__Managed_Default_Folder___Comment_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder - Created	CA_Event__Managed_Default_Folder___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder - Localized Comment	CA_Event__Managed_Default_Folder___Localized_Comment_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder - Must Display Comment	CA_Event__Managed_Default_Folder___Must_Display_Comment_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder - Removed	CA_Event__Managed_Default_Folder___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Default Folder - Renamed	CA_Event__Managed_Default_Folder___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Folder Mailbox Policy Added To Organization Mailbox Configuration	CA_Event__Managed_Folder_Mailbox_Policy_Added_To_Organization_Mailbox_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Folder Mailbox Policy Removed From Organization Mailbox Configuration	CA_Event__Managed_Folder_Mailbox_Policy_Removed_From_Organization_Mailbox_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Folder Mailbox Policy Renamed	CA_Event__Managed_Folder_Mailbox_Policy_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Folder Settings Added	CA_Event__Managed_Folder_Settings_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Folder Settings Removed	CA_Event__Managed_Folder_Settings_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Managed Folder Settings Renamed	CA_Event__Managed_Folder_Settings_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Manager changed for user object	CA_Event__Manager_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Manage Auditing And Security Log policy changed	CA_Event__Manage_Auditing_And_Security_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mark new meeting requests as Tentative	CA_Event__Mark_new_meeting_requests_as_Tentative_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: MaxFailureTimeForCriticalLink	CA_Event__MaxFailureTimeForCriticalLink_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Application Log Size policy changed	CA_Event__Maximum_Application_Log_Size_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Call Duration Changed In UM Dial Plan	CA_Event__Maximum_Call_Duration_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Concurrent Calls Setting Changed On UM Server	CA_Event__Maximum_Concurrent_Calls_Setting_Changed_On_UM_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Concurrent Fax Calls Setting Changed On UM Server	CA_Event__Maximum_Concurrent_Fax_Calls_Setting_Changed_On_UM_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Greeting Duration changed in UM Mailbox Policy	CA_Event__Maximum_Greeting_Duration_changed_in_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Greeting Duration Enabled option changed in UM Mailbox Policy	CA_Event__Maximum_Greeting_Duration_Enabled_option_changed_in_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Item Size (KB) Limit Changed in Public Folders Database	CA_Event__Maximum_Item_Size__KB__Limit_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Item Size (KB) Limit Changed in Public Store	CA_Event__Maximum_Item_Size__KB__Limit_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Lifetime For Service Ticket policy changed	CA_Event__Maximum_Lifetime_For_Service_Ticket_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Lifetime for User Ticket policy changed	CA_Event__Maximum_Lifetime_for_User_Ticket_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Lifetime For User Ticket Renewal policy changed	CA_Event__Maximum_Lifetime_For_User_Ticket_Renewal_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum number of DS threads changed	CA_Event__Maximum_number_of_DS_threads_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Password Age policy changed	CA_Event__Maximum_Password_Age_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Recording Duration Changed In UM Dial Plan	CA_Event__Maximum_Recording_Duration_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Security Log Size policy changed	CA_Event__Maximum_Security_Log_Size_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum System Log Size policy changed	CA_Event__Maximum_System_Log_Size_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Maximum Tolerance for Computer Clock Synchronization policy changed	CA_Event__Maximum_Tolerance_for_Computer_Clock_Synchronization_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Max Cache TTL setting changed	CA_Event__Max_Cache_TTL_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Max failure time for intersite link parameter changed	CA_Event__Max_failure_time_for_intersite_link_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Max failure time for non-critical link parameter changed	CA_Event__Max_failure_time_for_non_critical_link_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Membership added to group in the Restricted Group policy	CA_Event__Membership_added_to_group_in_the_Restricted_Group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Membership removed from group in the Restricted Group policy	CA_Event__Membership_removed_from_group_in_the_Restricted_Group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member Added to Access Node	CA_Event__Member_Added_to_Access_Node_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member Added To An Exchange Administrators group	CA_Event__Member_Added_To_An_Exchange_Administrators_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member added to critical enterprise group	CA_Event__Member_added_to_critical_enterprise_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member added to group	CA_Event__Member_added_to_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member added to group in the Restricted Group policy	CA_Event__Member_added_to_group_in_the_Restricted_Group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member added to local group	CA_Event__Member_added_to_local_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member added to security group	CA_Event__Member_added_to_security_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member Removed from Access Node	CA_Event__Member_Removed_from_Access_Node_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member Removed From An Exchange Administrators group	CA_Event__Member_Removed_From_An_Exchange_Administrators_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member removed from critical enterprise group	CA_Event__Member_removed_from_critical_enterprise_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member removed from group	CA_Event__Member_removed_from_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member removed from group in the Restricted Group policy	CA_Event__Member_removed_from_group_in_the_Restricted_Group_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member removed from local group	CA_Event__Member_removed_from_local_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Member removed from security group	CA_Event__Member_removed_from_security_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Memory amount changed	CA_Event__Memory_amount_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Copied by Non-Owner	CA_Event__Message_Copied_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Copied by Owner	CA_Event__Message_Copied_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Copied in Shared Mailbox	CA_Event__Message_Copied_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Created by Non-Owner	CA_Event__Message_Created_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Created by Owner	CA_Event__Message_Created_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Created in Shared Mailbox	CA_Event__Message_Created_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Deleted by Non-Owner	CA_Event__Message_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Deleted by Owner	CA_Event__Message_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Deleted in Shared Mailbox	CA_Event__Message_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Delivery Default Max. Receiving Message Size changed in organization	CA_Event__Message_Delivery_Default_Max._Receiving_Message_Size_changed_in_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Delivery Default Max. Recipients changed in organization	CA_Event__Message_Delivery_Default_Max._Recipients_changed_in_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Delivery Default Max. Sending Message Size changed in organization	CA_Event__Message_Delivery_Default_Max._Sending_Message_Size_changed_in_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Delivery IP address(es) for Transport setting changed	CA_Event__Message_Delivery_IP_address_es__for_Transport_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Handling Option Changed For Accepted Domain Definition	CA_Event__Message_Handling_Option_Changed_For_Accepted_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Marked Unread by Non-Owner	CA_Event__Message_Marked_Unread_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Marked Unread by Owner	CA_Event__Message_Marked_Unread_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Marked Unread in Shared Mailbox	CA_Event__Message_Marked_Unread_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Modified by Non-Owner	CA_Event__Message_Modified_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Modified by Owner	CA_Event__Message_Modified_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Modified in Shared Mailbox	CA_Event__Message_Modified_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Moved by Non-Owner	CA_Event__Message_Moved_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Moved by Owner	CA_Event__Message_Moved_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Moved in Shared Mailbox	CA_Event__Message_Moved_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Permanently Deleted by Non-Owner	CA_Event__Message_Permanently_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Permanently Deleted by Owner	CA_Event__Message_Permanently_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Permanently Deleted in Shared Mailbox	CA_Event__Message_Permanently_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Read by Non-Owner	CA_Event__Message_Read_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Read by Owner	CA_Event__Message_Read_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Read in Shared Mailbox	CA_Event__Message_Read_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Size Limit Changed For Group	CA_Event__Message_Size_Limit_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Tracking Option Changed on Server	CA_Event__Message_Tracking_Option_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Message Tracking Subject Logging Option Changed on Server	CA_Event__Message_Tracking_Subject_Logging_Option_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft Network Client: Digitally Sign Communications (Always) policy changed	CA_Event__Microsoft_Network_Client__Digitally_Sign_Communications__Always__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft Network Client: Digitally Sign Communications (If Server Agrees) policy changed	CA_Event__Microsoft_Network_Client__Digitally_Sign_Communications__If_Server_Agrees__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft Network Client: Send Unencrypted Password To Connect To Third-Party SMB Servers policy changed	CA_Event__Microsoft_Network_Client__Send_Unencrypted_Password_To_Connect_To_Third_Party_SMB_Servers_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft Network Server: Amount Of Idle Time Required Before Suspending Session policy changed	CA_Event__Microsoft_Network_Server__Amount_Of_Idle_Time_Required_Before_Suspending_Session_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft Network Server: Digitally Sign Communications (If Client Agrees) policy changed	CA_Event__Microsoft_Network_Server__Digitally_Sign_Communications__If_Client_Agrees__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft Network Server: Digitally Sign Communication (Always) policy changed	CA_Event__Microsoft_Network_Server__Digitally_Sign_Communication__Always__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft Network Server: Disconnect Clients When Logon Hours Expire policy changed	CA_Event__Microsoft_Network_Server__Disconnect_Clients_When_Logon_Hours_Expire_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Microsoft network server: Server SPN target name validation level	CA_Event__Microsoft_network_server__Server_SPN_target_name_validation_level_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Migration Error Event	CA_Event__Migration_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Migration Event	CA_Event__Migration_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Migration Host Error Event	CA_Event__Migration_Host_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Migration Host Warning Event	CA_Event__Migration_Host_Warning_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Migration Resource Error Event	CA_Event__Migration_Resource_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Migration Resource Warning Event	CA_Event__Migration_Resource_Warning_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Migration Warning Event	CA_Event__Migration_Warning_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: MIME Character Set Changed In Remote Domain Definition	CA_Event__MIME_Character_Set_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Minimum Password Age policy changed	CA_Event__Minimum_Password_Age_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Minimum Password Length policy changed	CA_Event__Minimum_Password_Length_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Minimum PIN Length Changed In UM Mailbox Policy	CA_Event__Minimum_PIN_Length_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Missing Column Statistics	CA_Event__Missing_Column_Statistics_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Missing Join Predicate	CA_Event__Missing_Join_Predicate_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device Rule - Access level changed	CA_Event__Mobile_Device_Rule___Access_level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device Rule - Characteristic changed	CA_Event__Mobile_Device_Rule___Characteristic_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device Rule - Created	CA_Event__Mobile_Device_Rule___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device Rule - Query string changed	CA_Event__Mobile_Device_Rule___Query_string_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device Rule - Removed	CA_Event__Mobile_Device_Rule___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - ActiveSync debug logging	CA_Event__Mobile_Device___ActiveSync_debug_logging_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - ActiveSync device policy	CA_Event__Mobile_Device___ActiveSync_device_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - ActiveSync enabled	CA_Event__Mobile_Device___ActiveSync_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - Allowed devices	CA_Event__Mobile_Device___Allowed_devices_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - Blocked devices	CA_Event__Mobile_Device___Blocked_devices_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - Partnership removed	CA_Event__Mobile_Device___Partnership_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - Remote wipe canceled	CA_Event__Mobile_Device___Remote_wipe_canceled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Device - Remote wipe initiated	CA_Event__Mobile_Device___Remote_wipe_initiated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mobile Number changed on user object	CA_Event__Mobile_Number_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Modify an object label	CA_Event__Modify_an_object_label_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Modify Firmware Environment policy changed	CA_Event__Modify_Firmware_Environment_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Monitoring point added	CA_Event__Monitoring_point_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Monitoring point removed	CA_Event__Monitoring_point_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Monitoring scope disabled	CA_Event__Monitoring_scope_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Monitoring scope enabled	CA_Event__Monitoring_scope_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mount Tape Cancel	CA_Event__Mount_Tape_Cancel_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mount Tape Complete	CA_Event__Mount_Tape_Complete_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mount Tape Request	CA_Event__Mount_Tape_Request_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Must Change Password At Next Logon changed for local user	CA_Event__Must_Change_Password_At_Next_Logon_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mutual Auth TLS Option changed on Receive Connector	CA_Event__Mutual_Auth_TLS_Option_changed_on_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Mutual Auth TLS Option Changed on Send Connector	CA_Event__Mutual_Auth_TLS_Option_Changed_on_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Name checking option changed	CA_Event__Name_checking_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Name Match Option Changed In UM Dial Plan	CA_Event__Name_Match_Option_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Name server added	CA_Event__Name_server_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Name server removed	CA_Event__Name_server_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: CSP changed	CA_Event__NAP_Client_Health_Registration_Settings__CSP_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: CSP Key Length changed	CA_Event__NAP_Client_Health_Registration_Settings__CSP_Key_Length_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: Hash Algorithm changed	CA_Event__NAP_Client_Health_Registration_Settings__Hash_Algorithm_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: Require server verification changed	CA_Event__NAP_Client_Health_Registration_Settings__Require_server_verification_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: Trusted server group added	CA_Event__NAP_Client_Health_Registration_Settings__Trusted_server_group_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: Trusted server group removed	CA_Event__NAP_Client_Health_Registration_Settings__Trusted_server_group_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: Trusted server URL added	CA_Event__NAP_Client_Health_Registration_Settings__Trusted_server_URL_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: Trusted server URL changed	CA_Event__NAP_Client_Health_Registration_Settings__Trusted_server_URL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP Client Health Registration Settings: Trusted server URL removed	CA_Event__NAP_Client_Health_Registration_Settings__Trusted_server_URL_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP User Interface Description changed	CA_Event__NAP_User_Interface_Description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP User Interface Image File changed	CA_Event__NAP_User_Interface_Image_File_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP User Interface Image File Name changed	CA_Event__NAP_User_Interface_Image_File_Name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP User Interface Title changed	CA_Event__NAP_User_Interface_Title_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP: DHCP Quarantine Enforcement Client changed	CA_Event__NAP__DHCP_Quarantine_Enforcement_Client_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP: EAP Quarantine Enforcement Client changed	CA_Event__NAP__EAP_Quarantine_Enforcement_Client_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP: IPsec Relying Party changed	CA_Event__NAP__IPsec_Relying_Party_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP: RD Gateway Quarantine Enforcement Client changed	CA_Event__NAP__RD_Gateway_Quarantine_Enforcement_Client_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP: Remote access enforcement client for Windows XP and Windows Vista changed	CA_Event__NAP__Remote_access_enforcement_client_for_Windows_XP_and_Windows_Vista_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NAP: Wireless EAPOL enforcement client for Windows XP changed	CA_Event__NAP__Wireless_EAPOL_enforcement_client_for_Windows_XP_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NASDatastore Created	CA_Event__NASDatastore_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: National Number Prefix Changed In UM Dial Plan	CA_Event__National_Number_Prefix_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Nested member added to critical enterprise group	CA_Event__Nested_member_added_to_critical_enterprise_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Nested member added to group	CA_Event__Nested_member_added_to_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Nested member removed from critical enterprise group	CA_Event__Nested_member_removed_from_critical_enterprise_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Nested member removed from group	CA_Event__Nested_member_removed_from_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp auditing template added	CA_Event__NetApp_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp auditing template disabled	CA_Event__NetApp_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp auditing template enabled	CA_Event__NetApp_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp auditing template removed	CA_Event__NetApp_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File access rights changed	CA_Event__NetApp_File_access_rights_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File access rights changed (no from-value)	CA_Event__NetApp_File_access_rights_changed__no_from_value__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File contents written	CA_Event__NetApp_File_contents_written_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File created	CA_Event__NetApp_File_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File deleted	CA_Event__NetApp_File_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File moved	CA_Event__NetApp_File_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File opened	CA_Event__NetApp_File_opened_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File ownership changed	CA_Event__NetApp_File_ownership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File ownership changed (no from-value)	CA_Event__NetApp_File_ownership_changed__no_from_value__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp File renamed	CA_Event__NetApp_File_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder access rights changed	CA_Event__NetApp_Folder_access_rights_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder access rights changed (no from-value)	CA_Event__NetApp_Folder_access_rights_changed__no_from_value__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder created	CA_Event__NetApp_Folder_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder deleted	CA_Event__NetApp_Folder_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder moved	CA_Event__NetApp_Folder_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder ownership changed	CA_Event__NetApp_Folder_ownership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder ownership changed (no from-value)	CA_Event__NetApp_Folder_ownership_changed__no_from_value__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp Folder renamed	CA_Event__NetApp_Folder_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp path added to auditing template	CA_Event__NetApp_path_added_to_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp path changed in auditing template	CA_Event__NetApp_path_changed_in_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetApp path removed from auditing template	CA_Event__NetApp_path_removed_from_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NetBIOS setting changed	CA_Event__NetBIOS_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON AutoSiteCoverage flag changed	CA_Event__NETLOGON_AutoSiteCoverage_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON CloseSiteTimeout parameter changed	CA_Event__NETLOGON_CloseSiteTimeout_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON diagnostic logging parameter changed	CA_Event__NETLOGON_diagnostic_logging_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON DnsAvoidRegisterRecords parameter changed	CA_Event__NETLOGON_DnsAvoidRegisterRecords_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON GcSiteCoverage parameter changed	CA_Event__NETLOGON_GcSiteCoverage_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON LdapSrvPriority parameter changed	CA_Event__NETLOGON_LdapSrvPriority_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON LdapSrvWeight parameter changed	CA_Event__NETLOGON_LdapSrvWeight_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON SiteCoverage parameter changed	CA_Event__NETLOGON_SiteCoverage_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NETLOGON SiteName parameter changed	CA_Event__NETLOGON_SiteName_parameter_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Allow Anonymous SID/Name Translation policy changed	CA_Event__Network_Access__Allow_Anonymous_SID_Name_Translation_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Do Not Allow Anonymous Enumeration Of SAM Accounts And Shares policy changed	CA_Event__Network_Access__Do_Not_Allow_Anonymous_Enumeration_Of_SAM_Accounts_And_Shares_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Do Not Allow Anonymous Enumeration Of SAM Accounts policy changed	CA_Event__Network_Access__Do_Not_Allow_Anonymous_Enumeration_Of_SAM_Accounts_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Do Not Allow Storage Of Credentials Or .NET Passports For Network Authentication policy changed	CA_Event__Network_Access__Do_Not_Allow_Storage_Of_Credentials_Or_.NET_Passports_For_Network_Authentication_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Let Everyone Permissions Apply To Anonymous Users policy changed	CA_Event__Network_Access__Let_Everyone_Permissions_Apply_To_Anonymous_Users_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Named Pipes That Can Be Accessed Anonymously changed	CA_Event__Network_Access__Named_Pipes_That_Can_Be_Accessed_Anonymously_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Remotely Accessible Registry Paths And Sub-Paths changed	CA_Event__Network_Access__Remotely_Accessible_Registry_Paths_And_Sub_Paths_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Remotely Accessible Registry Paths policy changed	CA_Event__Network_Access__Remotely_Accessible_Registry_Paths_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Restrict Anonymous Access To Named Pipes and Shares policy changed	CA_Event__Network_Access__Restrict_Anonymous_Access_To_Named_Pipes_and_Shares_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Shares That Can Be Accessed Anonymously policy changed	CA_Event__Network_Access__Shares_That_Can_Be_Accessed_Anonymously_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Access: Sharing And Security Model For Local Accounts changed	CA_Event__Network_Access__Sharing_And_Security_Model_For_Local_Accounts_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Allow LocalSystem NULL session fallback	CA_Event__Network_security__Allow_LocalSystem_NULL_session_fallback_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Allow Local System to use computer identity for NTLM	CA_Event__Network_security__Allow_Local_System_to_use_computer_identity_for_NTLM_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Allow PKU2U authentication requests to this computer to use online identities	CA_Event__Network_security__Allow_PKU2U_authentication_requests_to_this_computer_to_use_online_identities_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Configure encryption types allowed for Kerberos	CA_Event__Network_security__Configure_encryption_types_allowed_for_Kerberos_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Security: Do Not Store LAN Manager Hash Value On Next Password Change policy changed	CA_Event__Network_Security__Do_Not_Store_LAN_Manager_Hash_Value_On_Next_Password_Change_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Security: Force Logoff When Logon Hours Expire policy changed	CA_Event__Network_Security__Force_Logoff_When_Logon_Hours_Expire_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Security: LAN Manager Authentication Level policy changed	CA_Event__Network_Security__LAN_Manager_Authentication_Level_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Security: LDAP Client Signing Requirements policy changed	CA_Event__Network_Security__LDAP_Client_Signing_Requirements_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Security: Minimum Session Security For NTLM SSP Based (Including Secure RPC) Clients policy changed	CA_Event__Network_Security__Minimum_Session_Security_For_NTLM_SSP_Based__Including_Secure_RPC__Clients_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network Security: Minimum Session Security For NTLM SSP Based (Including Secure RPC) Servers policy changed	CA_Event__Network_Security__Minimum_Session_Security_For_NTLM_SSP_Based__Including_Secure_RPC__Servers_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication	CA_Event__Network_security__Restrict_NTLM__Add_remote_server_exceptions_for_NTLM_authentication_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Restrict NTLM: Add server exceptions in this domain	CA_Event__Network_security__Restrict_NTLM__Add_server_exceptions_in_this_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Restrict NTLM: Audit Incoming NTLM Traffic	CA_Event__Network_security__Restrict_NTLM__Audit_Incoming_NTLM_Traffic_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Restrict NTLM: Audit NTLM authentication in this domain	CA_Event__Network_security__Restrict_NTLM__Audit_NTLM_authentication_in_this_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Restrict NTLM: Incoming NTLM traffic	CA_Event__Network_security__Restrict_NTLM__Incoming_NTLM_traffic_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Restrict NTLM: NTLM authentication in this domain	CA_Event__Network_security__Restrict_NTLM__NTLM_authentication_in_this_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers	CA_Event__Network_security__Restrict_NTLM__Outgoing_NTLM_traffic_to_remote_servers_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: New class added to auxiliary classes in schema	CA_Event__New_class_added_to_auxiliary_classes_in_schema_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: New class added to possible superiors in schema	CA_Event__New_class_added_to_possible_superiors_in_schema_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIC added	CA_Event__NIC_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIC disabled	CA_Event__NIC_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIC enabled	CA_Event__NIC_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIC removed	CA_Event__NIC_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIS Object Added	CA_Event__NIS_Object_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIS Object Attribute Changed	CA_Event__NIS_Object_Attribute_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIS Object Deleted	CA_Event__NIS_Object_Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIS Object Moved	CA_Event__NIS_Object_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NIS Object Renamed	CA_Event__NIS_Object_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Location type added	CA_Event__NLM__Location_type_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Location type changed	CA_Event__NLM__Location_type_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Location type permissions added	CA_Event__NLM__Location_type_permissions_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Location type permissions changed	CA_Event__NLM__Location_type_permissions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Location type permissions removed	CA_Event__NLM__Location_type_permissions_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Location type removed	CA_Event__NLM__Location_type_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network icon added	CA_Event__NLM__Network_icon_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network icon changed	CA_Event__NLM__Network_icon_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network icon permissions added	CA_Event__NLM__Network_icon_permissions_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network icon permissions changed	CA_Event__NLM__Network_icon_permissions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network icon permissions removed	CA_Event__NLM__Network_icon_permissions_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network icon removed	CA_Event__NLM__Network_icon_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network name added	CA_Event__NLM__Network_name_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network name changed	CA_Event__NLM__Network_name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network name permissions added	CA_Event__NLM__Network_name_permissions_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network name permissions changed	CA_Event__NLM__Network_name_permissions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network name permissions removed	CA_Event__NLM__Network_name_permissions_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NLM: Network name removed	CA_Event__NLM__Network_name_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Non-Business Hours Greeting Changed for UM Auto Attendant	CA_Event__Non_Business_Hours_Greeting_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Non-Business Hours Main Menu Prompt Changed for UM Auto Attendant	CA_Event__Non_Business_Hours_Main_Menu_Prompt_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Non-critical link failures allowed flag changed	CA_Event__Non_critical_link_failures_allowed_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Non-Delivery Report Option Changed in UM Dial Plan	CA_Event__Non_Delivery_Report_Option_Changed_in_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Non-MIME Character Set Changed In Remote Domain Definition	CA_Event__Non_MIME_Character_Set_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Non VIWorkload Detected On Datastore	CA_Event__Non_VIWorkload_Detected_On_Datastore_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Not Enough Resources To Start Vm Event	CA_Event__Not_Enough_Resources_To_Start_Vm_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: No Access User Event	CA_Event__No_Access_User_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: No Datastores Configured	CA_Event__No_Datastores_Configured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: No License Event	CA_Event__No_License_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: No Maintenance Mode Drs Recommendation For VM	CA_Event__No_Maintenance_Mode_Drs_Recommendation_For_VM_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: No-refresh interval changed	CA_Event__No_refresh_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NTDS Default TTL changed	CA_Event__NTDS_Default_TTL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NTDS garbage collection period changed	CA_Event__NTDS_garbage_collection_period_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NTDS Minimum TTL changed	CA_Event__NTDS_Minimum_TTL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NTDS TCP/IP port assignment changed	CA_Event__NTDS_TCP_IP_port_assignment_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: NTDS tombstone lifetime setting changed	CA_Event__NTDS_tombstone_lifetime_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Numeric registry value added	CA_Event__Numeric_registry_value_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Numeric registry value changed	CA_Event__Numeric_registry_value_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Numeric registry value deleted	CA_Event__Numeric_registry_value_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Application Generated changed	CA_Event__Object_Access__Audit_Application_Generated_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Certification Services changed	CA_Event__Object_Access__Audit_Certification_Services_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit File Share changed	CA_Event__Object_Access__Audit_File_Share_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit File System changed	CA_Event__Object_Access__Audit_File_System_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Filtering Platform Connection changed	CA_Event__Object_Access__Audit_Filtering_Platform_Connection_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Filtering Platform Packet Drop changed	CA_Event__Object_Access__Audit_Filtering_Platform_Packet_Drop_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Handle Manipulation changed	CA_Event__Object_Access__Audit_Handle_Manipulation_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Kernel Object changed	CA_Event__Object_Access__Audit_Kernel_Object_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Other Object Access Events changed	CA_Event__Object_Access__Audit_Other_Object_Access_Events_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit Registry changed	CA_Event__Object_Access__Audit_Registry_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Audit SAM changed	CA_Event__Object_Access__Audit_SAM_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Access: Detailed File Share changed	CA_Event__Object_Access__Detailed_File_Share_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object added to Active Directory protection template	CA_Event__Object_added_to_Active_Directory_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object added to ADAM protection template	CA_Event__Object_added_to_ADAM_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Altered - Begin	CA_Event__Object_Altered___Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Altered - Commit	CA_Event__Object_Altered___Commit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Altered - Rollback	CA_Event__Object_Altered___Rollback_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object changed in Active Directory protection template	CA_Event__Object_changed_in_Active_Directory_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object changed in ADAM protection template	CA_Event__Object_changed_in_ADAM_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Copied by Non-Owner	CA_Event__Object_Copied_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Copied by Owner	CA_Event__Object_Copied_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Copied in Shared Mailbox	CA_Event__Object_Copied_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Created by Non-Owner	CA_Event__Object_Created_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Created by Owner	CA_Event__Object_Created_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Created in Shared Mailbox	CA_Event__Object_Created_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Created - Begin	CA_Event__Object_Created___Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Created - Commit	CA_Event__Object_Created___Commit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Created - Rollback	CA_Event__Object_Created___Rollback_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Deleted by Non-Owner	CA_Event__Object_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Deleted by Owner	CA_Event__Object_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Deleted in Shared Mailbox	CA_Event__Object_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Deleted - Begin	CA_Event__Object_Deleted___Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Deleted - Commit	CA_Event__Object_Deleted___Commit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object:Deleted - Rollback	CA_Event__Object_Deleted___Rollback_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Marked Unread by Non-Owner	CA_Event__Object_Marked_Unread_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Marked Unread by Owner	CA_Event__Object_Marked_Unread_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Marked Unread in Shared Mailbox	CA_Event__Object_Marked_Unread_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Modified by Non-Owner	CA_Event__Object_Modified_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Modified by Owner	CA_Event__Object_Modified_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Modified in Shared Mailbox	CA_Event__Object_Modified_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Moved by Non-Owner	CA_Event__Object_Moved_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Moved by Owner	CA_Event__Object_Moved_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Moved in Shared Mailbox	CA_Event__Object_Moved_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Permanently Deleted by Non-Owner	CA_Event__Object_Permanently_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Permanently Deleted by Owner	CA_Event__Object_Permanently_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Permanently Deleted in Shared Mailbox	CA_Event__Object_Permanently_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object quota added	CA_Event__Object_quota_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object quota removed	CA_Event__Object_quota_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Read by Non-Owner	CA_Event__Object_Read_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Read by Owner	CA_Event__Object_Read_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object Read in Shared Mailbox	CA_Event__Object_Read_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object removed from Active Directory protection template	CA_Event__Object_removed_from_Active_Directory_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Object removed from ADAM protection template	CA_Event__Object_removed_from_ADAM_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offer Basic Authentication After TLS Option changed on Receive Connector	CA_Event__Offer_Basic_Authentication_After_TLS_Option_changed_on_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Office changed on user object	CA_Event__Office_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Added To Organization Configuration	CA_Event__Offline_Address_Book_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Basic Authentication Enabled/Disabled	CA_Event__Offline_Address_Book_Distribution___Basic_Authentication_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Created	CA_Event__Offline_Address_Book_Distribution___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Extended Protection Flags	CA_Event__Offline_Address_Book_Distribution___Extended_Protection_Flags_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Extended Protection SPN List	CA_Event__Offline_Address_Book_Distribution___Extended_Protection_SPN_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Extended Protection Token Checking Mode	CA_Event__Offline_Address_Book_Distribution___Extended_Protection_Token_Checking_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - External URL	CA_Event__Offline_Address_Book_Distribution___External_URL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Internal URL	CA_Event__Offline_Address_Book_Distribution___Internal_URL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Polling Interval	CA_Event__Offline_Address_Book_Distribution___Polling_Interval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Removed	CA_Event__Offline_Address_Book_Distribution___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Require SSL	CA_Event__Offline_Address_Book_Distribution___Require_SSL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Distribution - Windows Authentication Enabled/Disabled	CA_Event__Offline_Address_Book_Distribution___Windows_Authentication_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Enable Public Folder Distribution Option Changed	CA_Event__Offline_Address_Book_Enable_Public_Folder_Distribution_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Outlook 2003 (ver 4) Client Support Option Changed	CA_Event__Offline_Address_Book_Outlook_2003__ver_4__Client_Support_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Outlook 98 (ver 2) Client Support Option Changed	CA_Event__Offline_Address_Book_Outlook_98__ver_2__Client_Support_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Outlook 98 (ver 3) Client Support Option Changed	CA_Event__Offline_Address_Book_Outlook_98__ver_3__Client_Support_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Removed From Organization Configuration	CA_Event__Offline_Address_Book_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Renamed	CA_Event__Offline_Address_Book_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Update Schedule Changed	CA_Event__Offline_Address_Book_Update_Schedule_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Web Site External URL Changed on Server	CA_Event__Offline_Address_Book_Web_Site_External_URL_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Web Site Internal URL Changed on Server	CA_Event__Offline_Address_Book_Web_Site_Internal_URL_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book Web Site Polling Interval Changed on Server	CA_Event__Offline_Address_Book_Web_Site_Polling_Interval_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Address Lists	CA_Event__Offline_Address_Book___Address_Lists_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Client Support	CA_Event__Offline_Address_Book___Client_Support_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Created	CA_Event__Offline_Address_Book___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Default	CA_Event__Offline_Address_Book___Default_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Deleted	CA_Event__Offline_Address_Book___Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Difference Files	CA_Event__Offline_Address_Book___Difference_Files_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Global Web Distribution	CA_Event__Offline_Address_Book___Global_Web_Distribution_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Moved	CA_Event__Offline_Address_Book___Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Public Folder Distribution	CA_Event__Offline_Address_Book___Public_Folder_Distribution_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Renamed	CA_Event__Offline_Address_Book___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Schedule	CA_Event__Offline_Address_Book___Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Update	CA_Event__Offline_Address_Book___Update_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address Book - Virtual Directories	CA_Event__Offline_Address_Book___Virtual_Directories_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Offline Address List location changed for Mailbox database	CA_Event__Offline_Address_List_location_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB Call - Completed	CA_Event__OLEDB_Call___Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB Call - Starting	CA_Event__OLEDB_Call___Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB DataRead - Completed	CA_Event__OLEDB_DataRead___Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB DataRead - Starting	CA_Event__OLEDB_DataRead___Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB Errors	CA_Event__OLEDB_Errors_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB Provider Information	CA_Event__OLEDB_Provider_Information_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB QueryInterface - Completed	CA_Event__OLEDB_QueryInterface___Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OLEDB QueryInterface - Starting	CA_Event__OLEDB_QueryInterface___Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Operator Extension Changed In UM Auto Attendant	CA_Event__Operator_Extension_Changed_In_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Operator Extension Changed In UM Dial Plan	CA_Event__Operator_Extension_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Clear Categories	CA_Event__Organization_Hub_Transport_Global_Settings___Clear_Categories_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Disclaimer Wrapper	CA_Event__Organization_Hub_Transport_Global_Settings___Disclaimer_Wrapper_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - DSN Codes Forwarded to Postmaster	CA_Event__Organization_Hub_Transport_Global_Settings___DSN_Codes_Forwarded_to_Postmaster_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - DSN Conversion Mode	CA_Event__Organization_Hub_Transport_Global_Settings___DSN_Conversion_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Exchange 2003 Xexch50 Authentication	CA_Event__Organization_Hub_Transport_Global_Settings___Exchange_2003_Xexch50_Authentication_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - External DSN Default Language	CA_Event__Organization_Hub_Transport_Global_Settings___External_DSN_Default_Language_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - External DSN Language Detection	CA_Event__Organization_Hub_Transport_Global_Settings___External_DSN_Language_Detection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - External DSN Max Message Size	CA_Event__Organization_Hub_Transport_Global_Settings___External_DSN_Max_Message_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - External DSN Reporting Authority	CA_Event__Organization_Hub_Transport_Global_Settings___External_DSN_Reporting_Authority_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - External DSN Send Delay Notifications	CA_Event__Organization_Hub_Transport_Global_Settings___External_DSN_Send_Delay_Notifications_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - External DSN Send HTML	CA_Event__Organization_Hub_Transport_Global_Settings___External_DSN_Send_HTML_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - External Postmaster Address	CA_Event__Organization_Hub_Transport_Global_Settings___External_Postmaster_Address_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Header Promotion Mode	CA_Event__Organization_Hub_Transport_Global_Settings___Header_Promotion_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Internal DSN Default Language	CA_Event__Organization_Hub_Transport_Global_Settings___Internal_DSN_Default_Language_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Internal DSN Language Detection	CA_Event__Organization_Hub_Transport_Global_Settings___Internal_DSN_Language_Detection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Internal DSN Max Message Size	CA_Event__Organization_Hub_Transport_Global_Settings___Internal_DSN_Max_Message_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Internal DSN Reporting Authority	CA_Event__Organization_Hub_Transport_Global_Settings___Internal_DSN_Reporting_Authority_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Internal DSN Send Delay Notifications	CA_Event__Organization_Hub_Transport_Global_Settings___Internal_DSN_Send_Delay_Notifications_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Internal DSN Send HTML	CA_Event__Organization_Hub_Transport_Global_Settings___Internal_DSN_Send_HTML_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Internal SMTP Servers	CA_Event__Organization_Hub_Transport_Global_Settings___Internal_SMTP_Servers_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Legacy Journaling Migration Enabled/Disabled	CA_Event__Organization_Hub_Transport_Global_Settings___Legacy_Journaling_Migration_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Maximum Message Recipients	CA_Event__Organization_Hub_Transport_Global_Settings___Maximum_Message_Recipients_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Max Receive Message Size	CA_Event__Organization_Hub_Transport_Global_Settings___Max_Receive_Message_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Max Send Message Size	CA_Event__Organization_Hub_Transport_Global_Settings___Max_Send_Message_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Max Transport Dumpster Database Size	CA_Event__Organization_Hub_Transport_Global_Settings___Max_Transport_Dumpster_Database_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Max Transport Dumpster Time	CA_Event__Organization_Hub_Transport_Global_Settings___Max_Transport_Dumpster_Time_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Organization Federated Mailbox	CA_Event__Organization_Hub_Transport_Global_Settings___Organization_Federated_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - RFC 2231 Encoding Enabled/Disabled	CA_Event__Organization_Hub_Transport_Global_Settings___RFC_2231_Encoding_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Send Journaling Reports NDRs To	CA_Event__Organization_Hub_Transport_Global_Settings___Send_Journaling_Reports_NDRs_To_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Shadow Heartbeat Retry Count	CA_Event__Organization_Hub_Transport_Global_Settings___Shadow_Heartbeat_Retry_Count_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Shadow Heartbeat Timeout	CA_Event__Organization_Hub_Transport_Global_Settings___Shadow_Heartbeat_Timeout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Shadow Message Auto Discard	CA_Event__Organization_Hub_Transport_Global_Settings___Shadow_Message_Auto_Discard_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Shadow Redundancy Enabled/Disabled	CA_Event__Organization_Hub_Transport_Global_Settings___Shadow_Redundancy_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Supervision Tags	CA_Event__Organization_Hub_Transport_Global_Settings___Supervision_Tags_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - TLS Receive Domain Secure List	CA_Event__Organization_Hub_Transport_Global_Settings___TLS_Receive_Domain_Secure_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - TLS Send Domain Secure List	CA_Event__Organization_Hub_Transport_Global_Settings___TLS_Send_Domain_Secure_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Verify Secure E-Mail Submission	CA_Event__Organization_Hub_Transport_Global_Settings___Verify_Secure_E_Mail_Submission_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Organization Hub Transport Global Settings - Voice Mail Journaling Enabled/Disabled	CA_Event__Organization_Hub_Transport_Global_Settings___Voice_Mail_Journaling_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Fax Number added to user object	CA_Event__Other_Fax_Number_added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Fax Number removed from user object	CA_Event__Other_Fax_Number_removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Home Telephone Number added to user object	CA_Event__Other_Home_Telephone_Number_added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Home Telephone Number removed from user object	CA_Event__Other_Home_Telephone_Number_removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other IP Phone Number added to user object	CA_Event__Other_IP_Phone_Number_added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other IP Phone Number removed from user object	CA_Event__Other_IP_Phone_Number_removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Mobile Number added to user object	CA_Event__Other_Mobile_Number_added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Mobile Number removed from user object	CA_Event__Other_Mobile_Number_removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Pager Number added to user object	CA_Event__Other_Pager_Number_added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Pager Number removed from user object	CA_Event__Other_Pager_Number_removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Telephone Number added to user object	CA_Event__Other_Telephone_Number_added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Telephone Number removed from user object	CA_Event__Other_Telephone_Number_removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Web Page added to user object	CA_Event__Other_Web_Page_added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Other Web Page removed from user object	CA_Event__Other_Web_Page_removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Outlook Anywhere Disabled For Server	CA_Event__Outlook_Anywhere_Disabled_For_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Outlook Anywhere Enabled For Server	CA_Event__Outlook_Anywhere_Enabled_For_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Outside Line Access Code Changed In UM Dial Plan	CA_Event__Outside_Line_Access_Code_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Out-Of-Office Message Types Delivered Changed In Remote Domain Definition	CA_Event__Out_Of_Office_Message_Types_Delivered_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Out Of Sync Dvs Host	CA_Event__Out_Of_Sync_Dvs_Host_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OU group policy order changed	CA_Event__OU_group_policy_order_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts Active Directory protection template Allow	CA_Event__Override_accounts_Active_Directory_protection_template_Allow_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts Active Directory protection template Deny	CA_Event__Override_accounts_Active_Directory_protection_template_Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts ADAM protection template Allow	CA_Event__Override_accounts_ADAM_protection_template_Allow_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts ADAM protection template Deny	CA_Event__Override_accounts_ADAM_protection_template_Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts Exchange protection template Allow	CA_Event__Override_accounts_Exchange_protection_template_Allow_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts Exchange protection template Deny	CA_Event__Override_accounts_Exchange_protection_template_Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts file system protection template Allow	CA_Event__Override_accounts_file_system_protection_template_Allow_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts file system protection template Deny	CA_Event__Override_accounts_file_system_protection_template_Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts Group Policy protection template Allow	CA_Event__Override_accounts_Group_Policy_protection_template_Allow_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override accounts Group Policy protection template Deny	CA_Event__Override_accounts_Group_Policy_protection_template_Deny_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account added to Active Directory protection template	CA_Event__Override_account_added_to_Active_Directory_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account added to ADAM protection template	CA_Event__Override_account_added_to_ADAM_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account added to Exchange protection template	CA_Event__Override_account_added_to_Exchange_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account added to file system protection template	CA_Event__Override_account_added_to_file_system_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account added to Group Policy protection template	CA_Event__Override_account_added_to_Group_Policy_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account removed from Active Directory protection template	CA_Event__Override_account_removed_from_Active_Directory_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account removed from ADAM protection template	CA_Event__Override_account_removed_from_ADAM_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account removed from Exchange protection template	CA_Event__Override_account_removed_from_Exchange_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account removed from file system protection template	CA_Event__Override_account_removed_from_file_system_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Override account removed from Group Policy protection template	CA_Event__Override_account_removed_from_Group_Policy_protection_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy added	CA_Event__OWA_Mailbox_Policy_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Allowed File Extensions changed	CA_Event__OWA_Mailbox_Policy_Allowed_File_Extensions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Allowed MIME Types changed	CA_Event__OWA_Mailbox_Policy_Allowed_MIME_Types_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Blocked File Extensions changed	CA_Event__OWA_Mailbox_Policy_Blocked_File_Extensions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Blocked MIME Types changed	CA_Event__OWA_Mailbox_Policy_Blocked_MIME_Types_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Force Save File Extensions changed	CA_Event__OWA_Mailbox_Policy_Force_Save_File_Extensions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Force Save MIME Types changed	CA_Event__OWA_Mailbox_Policy_Force_Save_MIME_Types_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Private Computer File Access setting changed	CA_Event__OWA_Mailbox_Policy_Private_Computer_File_Access_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Public Computer File Access setting changed	CA_Event__OWA_Mailbox_Policy_Public_Computer_File_Access_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy removed	CA_Event__OWA_Mailbox_Policy_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy renamed	CA_Event__OWA_Mailbox_Policy_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Segmentation setting changed	CA_Event__OWA_Mailbox_Policy_Segmentation_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy Unknown Files setting changed	CA_Event__OWA_Mailbox_Policy_Unknown_Files_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy WebReady Document Viewing File Types setting changed	CA_Event__OWA_Mailbox_Policy_WebReady_Document_Viewing_File_Types_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy WebReady Document Viewing MIME Types setting changed	CA_Event__OWA_Mailbox_Policy_WebReady_Document_Viewing_MIME_Types_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Mailbox Policy WebReady Document Viewing setting changed	CA_Event__OWA_Mailbox_Policy_WebReady_Document_Viewing_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site Added To Server	CA_Event__OWA_Web_Site_Added_To_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site Authentication Method Changed on Server	CA_Event__OWA_Web_Site_Authentication_Method_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site External Host Name Changed on Server	CA_Event__OWA_Web_Site_External_Host_Name_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site Feature Option Changed on Server	CA_Event__OWA_Web_Site_Feature_Option_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site Forms Logon Method Changed on Server	CA_Event__OWA_Web_Site_Forms_Logon_Method_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site Internal Host Name Changed on Server	CA_Event__OWA_Web_Site_Internal_Host_Name_Changed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site Removed From Server	CA_Event__OWA_Web_Site_Removed_From_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site Renamed on Server	CA_Event__OWA_Web_Site_Renamed_on_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Action for Unknown File/MIME Types	CA_Event__OWA_Web_Site___Action_for_Unknown_File_MIME_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Allowed File Types	CA_Event__OWA_Web_Site___Allowed_File_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Allowed MIME Types	CA_Event__OWA_Web_Site___Allowed_MIME_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - All Address Lists	CA_Event__OWA_Web_Site___All_Address_Lists_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Blocked File Types	CA_Event__OWA_Web_Site___Blocked_File_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Blocked MIME Types	CA_Event__OWA_Web_Site___Blocked_MIME_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Calendar	CA_Event__OWA_Web_Site___Calendar_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Calendar Publishing	CA_Event__OWA_Web_Site___Calendar_Publishing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Change Password	CA_Event__OWA_Web_Site___Change_Password_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Cleanup Level	CA_Event__OWA_Web_Site___Cleanup_Level_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Contacts	CA_Event__OWA_Web_Site___Contacts_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Created	CA_Event__OWA_Web_Site___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Default Client Language	CA_Event__OWA_Web_Site___Default_Client_Language_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Default Logon Domain	CA_Event__OWA_Web_Site___Default_Logon_Domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Default Theme	CA_Event__OWA_Web_Site___Default_Theme_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Delegate Access	CA_Event__OWA_Web_Site___Delegate_Access_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Exchange 2003 URL	CA_Event__OWA_Web_Site___Exchange_2003_URL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Exchange ActiveSync Integration	CA_Event__OWA_Web_Site___Exchange_ActiveSync_Integration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Explicit Logon	CA_Event__OWA_Web_Site___Explicit_Logon_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Extended Protection Flags	CA_Event__OWA_Web_Site___Extended_Protection_Flags_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Extended Protection SPN List	CA_Event__OWA_Web_Site___Extended_Protection_SPN_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Extended Protection Token Checking Mode	CA_Event__OWA_Web_Site___Extended_Protection_Token_Checking_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - External Authentication Method	CA_Event__OWA_Web_Site___External_Authentication_Method_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - External URL	CA_Event__OWA_Web_Site___External_URL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - E-Mail Signature	CA_Event__OWA_Web_Site___E_Mail_Signature_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Failback URL	CA_Event__OWA_Web_Site___Failback_URL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Force Save Attachment Filtering	CA_Event__OWA_Web_Site___Force_Save_Attachment_Filtering_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Force Save File Types	CA_Event__OWA_Web_Site___Force_Save_File_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Force Save MIME Types	CA_Event__OWA_Web_Site___Force_Save_MIME_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Gzip Level	CA_Event__OWA_Web_Site___Gzip_Level_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Information Rights Management (IRM)	CA_Event__OWA_Web_Site___Information_Rights_Management__IRM__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Instant Messaging	CA_Event__OWA_Web_Site___Instant_Messaging_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Instant Messaging Certificate Thumbprint	CA_Event__OWA_Web_Site___Instant_Messaging_Certificate_Thumbprint_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Instant Messaging Server Name	CA_Event__OWA_Web_Site___Instant_Messaging_Server_Name_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Instant Messaging Type	CA_Event__OWA_Web_Site___Instant_Messaging_Type_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Internal Authentication Method	CA_Event__OWA_Web_Site___Internal_Authentication_Method_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Internal URL	CA_Event__OWA_Web_Site___Internal_URL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Journal	CA_Event__OWA_Web_Site___Journal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Junk E-Mail Filtering	CA_Event__OWA_Web_Site___Junk_E_Mail_Filtering_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Legacy Redirect	CA_Event__OWA_Web_Site___Legacy_Redirect_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Logon and Error Language	CA_Event__OWA_Web_Site___Logon_and_Error_Language_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Logon Format	CA_Event__OWA_Web_Site___Logon_Format_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Notes	CA_Event__OWA_Web_Site___Notes_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Notification Interval	CA_Event__OWA_Web_Site___Notification_Interval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Organization Features	CA_Event__OWA_Web_Site___Organization_Features_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Outbound Character Set	CA_Event__OWA_Web_Site___Outbound_Character_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - OWA Light	CA_Event__OWA_Web_Site___OWA_Light_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Premium Client	CA_Event__OWA_Web_Site___Premium_Client_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Private Computer Direct File Access	CA_Event__OWA_Web_Site___Private_Computer_Direct_File_Access_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Private Computer Force WebReady Document Viewing	CA_Event__OWA_Web_Site___Private_Computer_Force_WebReady_Document_Viewing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Private Computer WebReady Document Viewing	CA_Event__OWA_Web_Site___Private_Computer_WebReady_Document_Viewing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Public Computer Direct File Access	CA_Event__OWA_Web_Site___Public_Computer_Direct_File_Access_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Public Computer Force WebReady Document Viewing	CA_Event__OWA_Web_Site___Public_Computer_Force_WebReady_Document_Viewing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Public Computer WebReady Document Viewing	CA_Event__OWA_Web_Site___Public_Computer_WebReady_Document_Viewing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Public Folders	CA_Event__OWA_Web_Site___Public_Folders_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Recover Deleted Items	CA_Event__OWA_Web_Site___Recover_Deleted_Items_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Redirect to Optimal Server	CA_Event__OWA_Web_Site___Redirect_to_Optimal_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Reminders and Notifications	CA_Event__OWA_Web_Site___Reminders_and_Notifications_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Remote File Servers Allowed	CA_Event__OWA_Web_Site___Remote_File_Servers_Allowed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Remote File Servers Blocked	CA_Event__OWA_Web_Site___Remote_File_Servers_Blocked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Remote File Servers Treat As Internal	CA_Event__OWA_Web_Site___Remote_File_Servers_Treat_As_Internal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Remote File Servers Unknown	CA_Event__OWA_Web_Site___Remote_File_Servers_Unknown_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Removed	CA_Event__OWA_Web_Site___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Rules	CA_Event__OWA_Web_Site___Rules_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Search Folders	CA_Event__OWA_Web_Site___Search_Folders_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Show Global Address List	CA_Event__OWA_Web_Site___Show_Global_Address_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Silverlight	CA_Event__OWA_Web_Site___Silverlight_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Spelling Checker	CA_Event__OWA_Web_Site___Spelling_Checker_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Supported WebReady File Types	CA_Event__OWA_Web_Site___Supported_WebReady_File_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Supported WebReady MIME Types	CA_Event__OWA_Web_Site___Supported_WebReady_MIME_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - S/MIME	CA_Event__OWA_Web_Site___S_MIME_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Tasks	CA_Event__OWA_Web_Site___Tasks_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Text Messaging	CA_Event__OWA_Web_Site___Text_Messaging_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Theme Selection	CA_Event__OWA_Web_Site___Theme_Selection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Unified Messaging Integration	CA_Event__OWA_Web_Site___Unified_Messaging_Integration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - User Context Timeout	CA_Event__OWA_Web_Site___User_Context_Timeout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - WebReady Document Types	CA_Event__OWA_Web_Site___WebReady_Document_Types_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: OWA Web Site - Web Beacon and HTML Form Filtering	CA_Event__OWA_Web_Site___Web_Beacon_and_HTML_Form_Filtering_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Owner changed on computer object	CA_Event__Owner_changed_on_computer_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Owner changed on group object	CA_Event__Owner_changed_on_group_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Owner changed on group policy object	CA_Event__Owner_changed_on_group_policy_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Owner changed on user object	CA_Event__Owner_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: P.O. Box changed on user object	CA_Event__P.O._Box_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Pager Number changed on user object	CA_Event__Pager_Number_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Partition Set changed for user object	CA_Event__Partition_Set_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Password changed for local user	CA_Event__Password_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Password Must Meet Complexity Requirements policy changed	CA_Event__Password_Must_Meet_Complexity_Requirements_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Password Never Expires changed for local user	CA_Event__Password_Never_Expires_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Password Required changed for local user	CA_Event__Password_Required_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: PDC FSMO role owner Moved	CA_Event__PDC_FSMO_role_owner_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Performance Statistics - Cached Query Destroyed	CA_Event__Performance_Statistics___Cached_Query_Destroyed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Performance Statistics - New Batch SQL Text	CA_Event__Performance_Statistics___New_Batch_SQL_Text_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Performance Statistics - Queries in Ad Hoc Statement Compiled	CA_Event__Performance_Statistics___Queries_in_Ad_Hoc_Statement_Compiled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Performance Statistics - Queries in Stored Procedure Compiled	CA_Event__Performance_Statistics___Queries_in_Stored_Procedure_Compiled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Perform Volume Maintenance Tasks policy changed	CA_Event__Perform_Volume_Maintenance_Tasks_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permissions changed on a System Services policy	CA_Event__Permissions_changed_on_a_System_Services_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission Added	CA_Event__Permission_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission Event	CA_Event__Permission_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission inheritance broken	CA_Event__Permission_inheritance_broken_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission inheritance restored	CA_Event__Permission_inheritance_restored_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission level created	CA_Event__Permission_level_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission level deleted	CA_Event__Permission_level_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission level granted	CA_Event__Permission_level_granted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission level inheritance broken	CA_Event__Permission_level_inheritance_broken_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission level permissions modified	CA_Event__Permission_level_permissions_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission level revoked	CA_Event__Permission_level_revoked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission Removed	CA_Event__Permission_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Permission Updated	CA_Event__Permission_Updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Personality Object Added	CA_Event__Personality_Object_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Personality Object Attribute Changed	CA_Event__Personality_Object_Attribute_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Personality Object Deleted	CA_Event__Personality_Object_Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Personality Object Moved	CA_Event__Personality_Object_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Personality Object Renamed	CA_Event__Personality_Object_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: PIN History Length Changed In UM Mailbox Policy	CA_Event__PIN_History_Length_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: PIN Lifetime Changed In UM Mailbox Policy	CA_Event__PIN_Lifetime_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: PIN Reset Text Changed In UM Mailbox Policy	CA_Event__PIN_Reset_Text_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Plan Guide Successful	CA_Event__Plan_Guide_Successful_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Plan Guide Unsuccessful	CA_Event__Plan_Guide_Unsuccessful_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Policy Change: Audit Authentication Policy Change modified	CA_Event__Policy_Change__Audit_Authentication_Policy_Change_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Policy Change: Audit Authorization Policy Change modified	CA_Event__Policy_Change__Audit_Authorization_Policy_Change_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Policy Change: Audit Filtering Platform Policy Change modified	CA_Event__Policy_Change__Audit_Filtering_Platform_Policy_Change_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Policy Change: Audit MPSSVC Rule-Level Policy Change modified	CA_Event__Policy_Change__Audit_MPSSVC_Rule_Level_Policy_Change_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Policy Change: Audit Other Policy Change Events modified	CA_Event__Policy_Change__Audit_Other_Policy_Change_Events_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Policy Change: Audit Policy Change modified	CA_Event__Policy_Change__Audit_Policy_Change_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: PreConnect:Completed	CA_Event__PreConnect_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: PreConnect:Starting	CA_Event__PreConnect_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Preferred bridgehead setting changed	CA_Event__Preferred_bridgehead_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prepare SQL	CA_Event__Prepare_SQL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prevent Local Guests Group From Accessing Application Log policy changed	CA_Event__Prevent_Local_Guests_Group_From_Accessing_Application_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prevent Local Guests Group From Accessing Security Log policy changed	CA_Event__Prevent_Local_Guests_Group_From_Accessing_Security_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prevent Local Guests Group From Accessing System Log policy changed	CA_Event__Prevent_Local_Guests_Group_From_Accessing_System_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Primary Dialing Method Changed In UM Dial Plan	CA_Event__Primary_Dialing_Method_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Primary E-mail Address changed	CA_Event__Primary_E_mail_Address_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Primary E-mail Address Changed For Group	CA_Event__Primary_E_mail_Address_Changed_For_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Primary Group ID changed for user object	CA_Event__Primary_Group_ID_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Primary server changed	CA_Event__Primary_server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Privilege Use: Audit Non Sensitive Privilege Use changed	CA_Event__Privilege_Use__Audit_Non_Sensitive_Privilege_Use_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Privilege Use: Audit Other Privilege Use Events changed	CA_Event__Privilege_Use__Audit_Other_Privilege_Use_Events_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Privilege Use: Audit Sensitive Privilege Use changed	CA_Event__Privilege_Use__Audit_Sensitive_Privilege_Use_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Processor speed changed	CA_Event__Processor_speed_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Process added to file system auditing	CA_Event__Process_added_to_file_system_auditing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Process meeting requests and responses originating outside the Exchange organization	CA_Event__Process_meeting_requests_and_responses_originating_outside_the_Exchange_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Process removed from file system auditing	CA_Event__Process_removed_from_file_system_auditing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Associated	CA_Event__Profile_Associated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Changed	CA_Event__Profile_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Created	CA_Event__Profile_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Dissociated	CA_Event__Profile_Dissociated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Event	CA_Event__Profile_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile path changed for local user	CA_Event__Profile_path_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Path changed on user object	CA_Event__Profile_Path_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Reference Host Changed	CA_Event__Profile_Reference_Host_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Removed	CA_Event__Profile_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile Single Process policy changed	CA_Event__Profile_Single_Process_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Profile System Performance policy changed	CA_Event__Profile_System_Performance_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Progress Report: Online Index Operation - Done	CA_Event__Progress_Report__Online_Index_Operation___Done_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Progress Report: Online Index Operation - Inserted Row Count	CA_Event__Progress_Report__Online_Index_Operation___Inserted_Row_Count_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Progress Report: Online Index Operation - Stage 1 Execution Begin	CA_Event__Progress_Report__Online_Index_Operation___Stage_1_Execution_Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Progress Report: Online Index Operation - Stage 1 Execution End	CA_Event__Progress_Report__Online_Index_Operation___Stage_1_Execution_End_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Progress Report: Online Index Operation - Stage 2 Execution Begin	CA_Event__Progress_Report__Online_Index_Operation___Stage_2_Execution_Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Progress Report: Online Index Operation - Stage 2 Execution End	CA_Event__Progress_Report__Online_Index_Operation___Stage_2_Execution_End_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Progress Report: Online Index Operation - Start	CA_Event__Progress_Report__Online_Index_Operation___Start_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prohibit Post At (KB) Limit Changed in Public Folders Database	CA_Event__Prohibit_Post_At__KB__Limit_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prohibit Post At (KB) Limit Changed in Public Store	CA_Event__Prohibit_Post_At__KB__Limit_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prohibit Send And Receive At (KB) Limit changed for Mailbox database	CA_Event__Prohibit_Send_And_Receive_At__KB__Limit_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prohibit Send And Receive At (KB) Limit changed in Mailbox store	CA_Event__Prohibit_Send_And_Receive_At__KB__Limit_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prohibit Send At (KB) Limit changed for Mailbox database	CA_Event__Prohibit_Send_At__KB__Limit_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prohibit Send At (KB) Limit changed in Mailbox store	CA_Event__Prohibit_Send_At__KB__Limit_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Prompt Publishing Point Changed For UM Dial Plan	CA_Event__Prompt_Publishing_Point_Changed_For_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection disabled for Active Directory object	CA_Event__Protection_disabled_for_Active_Directory_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection disabled for ADAM object	CA_Event__Protection_disabled_for_ADAM_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection disabled for file system path	CA_Event__Protection_disabled_for_file_system_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection enabled for Active Directory object	CA_Event__Protection_enabled_for_Active_Directory_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection enabled for ADAM object	CA_Event__Protection_enabled_for_ADAM_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection enabled for file system path	CA_Event__Protection_enabled_for_file_system_path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection for Exchange container disabled	CA_Event__Protection_for_Exchange_container_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection for Exchange container enabled	CA_Event__Protection_for_Exchange_container_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection for Group Policy disabled	CA_Event__Protection_for_Group_Policy_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protection for Group Policy enabled	CA_Event__Protection_for_Group_Policy_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Protocol Settings changed	CA_Event__Protocol_Settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public folder database created in organization	CA_Event__Public_folder_database_created_in_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder database removed from organization	CA_Event__Public_Folder_database_removed_from_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder database renamed in organization	CA_Event__Public_Folder_database_renamed_in_organization_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Age Limit	CA_Event__Public_Folder_Database___Age_Limit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Allow Overwrite by Restore	CA_Event__Public_Folder_Database___Allow_Overwrite_by_Restore_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Background Database Maintenance	CA_Event__Public_Folder_Database___Background_Database_Maintenance_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Circular Logging	CA_Event__Public_Folder_Database___Circular_Logging_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Created	CA_Event__Public_Folder_Database___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Custom Server Referral Cost List	CA_Event__Public_Folder_Database___Custom_Server_Referral_Cost_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Deleted Item Retention	CA_Event__Public_Folder_Database___Deleted_Item_Retention_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Deleted Item Retention Until Backup	CA_Event__Public_Folder_Database___Deleted_Item_Retention_Until_Backup_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - EDB File Path	CA_Event__Public_Folder_Database___EDB_File_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Event History Retention Period	CA_Event__Public_Folder_Database___Event_History_Retention_Period_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Issue Warning At	CA_Event__Public_Folder_Database___Issue_Warning_At_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Log Folder Path	CA_Event__Public_Folder_Database___Log_Folder_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Maintenance Schedule	CA_Event__Public_Folder_Database___Maintenance_Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Maximum Item Size	CA_Event__Public_Folder_Database___Maximum_Item_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Mount At Startup	CA_Event__Public_Folder_Database___Mount_At_Startup_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Prohibit Post At	CA_Event__Public_Folder_Database___Prohibit_Post_At_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Referral Costs	CA_Event__Public_Folder_Database___Referral_Costs_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Removed	CA_Event__Public_Folder_Database___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Renamed	CA_Event__Public_Folder_Database___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Replication Message Size	CA_Event__Public_Folder_Database___Replication_Message_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Replication Period	CA_Event__Public_Folder_Database___Replication_Period_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Replication Schedule	CA_Event__Public_Folder_Database___Replication_Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Database - Warning Message Schedule	CA_Event__Public_Folder_Database___Warning_Message_Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder Permissions Changed	CA_Event__Public_Folder_Permissions_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public folder store created in server storage group	CA_Event__Public_folder_store_created_in_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder store removed from server storage group	CA_Event__Public_Folder_store_removed_from_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder store renamed in server storage group	CA_Event__Public_Folder_store_renamed_in_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Accept Messages Only From	CA_Event__Public_Folder__Mail_Enabled____Accept_Messages_Only_From_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Alias	CA_Event__Public_Folder__Mail_Enabled____Alias_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Arbitration Mailbox	CA_Event__Public_Folder__Mail_Enabled____Arbitration_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Auto-Update E-Mail Address from Policy	CA_Event__Public_Folder__Mail_Enabled____Auto_Update_E_Mail_Address_from_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Bypass Moderation	CA_Event__Public_Folder__Mail_Enabled____Bypass_Moderation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Contacts	CA_Event__Public_Folder__Mail_Enabled____Contacts_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Custom Attributes	CA_Event__Public_Folder__Mail_Enabled____Custom_Attributes_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Deliver and Forward	CA_Event__Public_Folder__Mail_Enabled____Deliver_and_Forward_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Display Name	CA_Event__Public_Folder__Mail_Enabled____Display_Name_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - E-Mail Addresses	CA_Event__Public_Folder__Mail_Enabled____E_Mail_Addresses_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Folder Type	CA_Event__Public_Folder__Mail_Enabled____Folder_Type_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Forwarding Address	CA_Event__Public_Folder__Mail_Enabled____Forwarding_Address_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Mail Disabled	CA_Event__Public_Folder__Mail_Enabled____Mail_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Mail Enabled	CA_Event__Public_Folder__Mail_Enabled____Mail_Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Mail Tip	CA_Event__Public_Folder__Mail_Enabled____Mail_Tip_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Mail Tip Translations	CA_Event__Public_Folder__Mail_Enabled____Mail_Tip_Translations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Max Receive Size	CA_Event__Public_Folder__Mail_Enabled____Max_Receive_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Max Send Size	CA_Event__Public_Folder__Mail_Enabled____Max_Send_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Moderated By	CA_Event__Public_Folder__Mail_Enabled____Moderated_By_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Moderation	CA_Event__Public_Folder__Mail_Enabled____Moderation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Moderator Notification	CA_Event__Public_Folder__Mail_Enabled____Moderator_Notification_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Phonetic Display Name	CA_Event__Public_Folder__Mail_Enabled____Phonetic_Display_Name_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Primary E-Mail Address	CA_Event__Public_Folder__Mail_Enabled____Primary_E_Mail_Address_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Reject Messages From	CA_Event__Public_Folder__Mail_Enabled____Reject_Messages_From_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Require Sender Authentication	CA_Event__Public_Folder__Mail_Enabled____Require_Sender_Authentication_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Send On Behalf	CA_Event__Public_Folder__Mail_Enabled____Send_On_Behalf_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Simple Display Name	CA_Event__Public_Folder__Mail_Enabled____Simple_Display_Name_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - UM DTMF Map	CA_Event__Public_Folder__Mail_Enabled____UM_DTMF_Map_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder (Mail Enabled) - Windows E-Mail Address	CA_Event__Public_Folder__Mail_Enabled____Windows_E_Mail_Address_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Age Limit Changed	CA_Event__Public_Folder___Age_Limit_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Created	CA_Event__Public_Folder___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Deleted	CA_Event__Public_Folder___Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Deleted Item Retention	CA_Event__Public_Folder___Deleted_Item_Retention_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Hide From Address Lists	CA_Event__Public_Folder___Hide_From_Address_Lists_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Issue Warning At	CA_Event__Public_Folder___Issue_Warning_At_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Local Replica Age Limit	CA_Event__Public_Folder___Local_Replica_Age_Limit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Maximum Item Size	CA_Event__Public_Folder___Maximum_Item_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Per User Read State	CA_Event__Public_Folder___Per_User_Read_State_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Prohibit Post At	CA_Event__Public_Folder___Prohibit_Post_At_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Renamed	CA_Event__Public_Folder___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Replicas	CA_Event__Public_Folder___Replicas_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Replication Schedule	CA_Event__Public_Folder___Replication_Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Synchronization Started	CA_Event__Public_Folder___Synchronization_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Use Age Limit Defaults	CA_Event__Public_Folder___Use_Age_Limit_Defaults_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Use Deleted Item Retention Defaults	CA_Event__Public_Folder___Use_Deleted_Item_Retention_Defaults_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Use Quota Defaults	CA_Event__Public_Folder___Use_Quota_Defaults_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Folder - Use Replication Schedule Defaults	CA_Event__Public_Folder___Use_Replication_Schedule_Defaults_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Store Dismounted	CA_Event__Public_Store_Dismounted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public Store Mounted	CA_Event__Public_Store_Mounted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public user alert changed	CA_Event__Public_user_alert_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public user alert disabled	CA_Event__Public_user_alert_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public user alert enabled	CA_Event__Public_user_alert_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public user search created	CA_Event__Public_user_search_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public user search deleted	CA_Event__Public_user_search_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Public user search modified	CA_Event__Public_user_search_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Published Certificate Added to user object	CA_Event__Published_Certificate_Added_to_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Published Certificate Removed from user object	CA_Event__Published_Certificate_Removed_from_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Publish Addresses list changed	CA_Event__Publish_Addresses_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Publish Autonet setting changed	CA_Event__Publish_Autonet_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QAS Computer Object Added	CA_Event__QAS_Computer_Object_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QAS Computer Object Attribute Changed	CA_Event__QAS_Computer_Object_Attribute_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QAS Computer Object Deleted	CA_Event__QAS_Computer_Object_Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QAS Computer Object Moved	CA_Event__QAS_Computer_Object_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QAS Computer Object Renamed	CA_Event__QAS_Computer_Object_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QAS GPO Setting Changed	CA_Event__QAS_GPO_Setting_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Dynamics - Clock Run Finished	CA_Event__QN_Dynamics___Clock_Run_Finished_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Dynamics - Clock Run Started	CA_Event__QN_Dynamics___Clock_Run_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Dynamics - Master Cleanup Task Finished	CA_Event__QN_Dynamics___Master_Cleanup_Task_Finished_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Dynamics - Master Cleanup Task Skipped	CA_Event__QN_Dynamics___Master_Cleanup_Task_Skipped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Dynamics - Master Cleanup Task Started	CA_Event__QN_Dynamics___Master_Cleanup_Task_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Cleanup Task Finished	CA_Event__QN_Parameter_Table___Cleanup_Task_Finished_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Cleanup Task Started	CA_Event__QN_Parameter_Table___Cleanup_Task_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - LRU Counter Reset	CA_Event__QN_Parameter_Table___LRU_Counter_Reset_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Number of Users Decremented	CA_Event__QN_Parameter_Table___Number_of_Users_Decremented_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Number of Users Incremented	CA_Event__QN_Parameter_Table___Number_of_Users_Incremented_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Table Attempt Failed	CA_Event__QN_Parameter_Table___Table_Attempt_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Table Created	CA_Event__QN_Parameter_Table___Table_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Table Dropped	CA_Event__QN_Parameter_Table___Table_Dropped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Table Drop Attempt	CA_Event__QN_Parameter_Table___Table_Drop_Attempt_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Table Pinned	CA_Event__QN_Parameter_Table___Table_Pinned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Parameter Table - Table Unpinned	CA_Event__QN_Parameter_Table___Table_Unpinned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Broker Error Intercepted	CA_Event__QN_Subscription_Table___Broker_Error_Intercepted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Firing Failed without Broker Error	CA_Event__QN_Subscription_Table___Firing_Failed_without_Broker_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Firing Failed with Broker Error	CA_Event__QN_Subscription_Table___Firing_Failed_with_Broker_Error_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Subscription Deletion Attempt	CA_Event__QN_Subscription_Table___Subscription_Deletion_Attempt_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Subscription Deletion Failed	CA_Event__QN_Subscription_Table___Subscription_Deletion_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Subscription Destroyed	CA_Event__QN_Subscription_Table___Subscription_Destroyed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Subscription Fired	CA_Event__QN_Subscription_Table___Subscription_Fired_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Subscription Registered	CA_Event__QN_Subscription_Table___Subscription_Registered_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Subscription Table - Subscription Rewound	CA_Event__QN_Subscription_Table___Subscription_Rewound_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Template - Created	CA_Event__QN_Template___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Template - Dropped	CA_Event__QN_Template___Dropped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QN:Template - Matched	CA_Event__QN_Template___Matched_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Application Name changed	CA_Event__QoS_Policy__Application_Name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: DSCP Value changed	CA_Event__QoS_Policy__DSCP_Value_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Local IP changed	CA_Event__QoS_Policy__Local_IP_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Local IP Prefix Length changed	CA_Event__QoS_Policy__Local_IP_Prefix_Length_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Local Port changed	CA_Event__QoS_Policy__Local_Port_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Protocol changed	CA_Event__QoS_Policy__Protocol_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Remote IP changed	CA_Event__QoS_Policy__Remote_IP_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Remote IP Prefix Length changed	CA_Event__QoS_Policy__Remote_IP_Prefix_Length_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Remote Port changed	CA_Event__QoS_Policy__Remote_Port_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Throttle Rate changed	CA_Event__QoS_Policy__Throttle_Rate_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: URL changed	CA_Event__QoS_Policy__URL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: URL Recursive changed	CA_Event__QoS_Policy__URL_Recursive_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: QoS Policy: Version changed	CA_Event__QoS_Policy__Version_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Query policy added	CA_Event__Query_policy_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Query policy link for domain controller changed	CA_Event__Query_policy_link_for_domain_controller_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Query policy removed	CA_Event__Query_policy_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Query policy setting changed	CA_Event__Query_policy_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent connected	CA_Event__Quest_ChangeAuditor_Agent_connected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent disconnected	CA_Event__Quest_ChangeAuditor_Agent_disconnected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent lost heartbeat	CA_Event__Quest_ChangeAuditor_Agent_lost_heartbeat_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent restarted	CA_Event__Quest_ChangeAuditor_Agent_restarted_1_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent restarted	CA_Event__Quest_ChangeAuditor_Agent_restarted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent set uninstalled	CA_Event__Quest_ChangeAuditor_Agent_set_uninstalled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent started	CA_Event__Quest_ChangeAuditor_Agent_started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent stopped	CA_Event__Quest_ChangeAuditor_Agent_stopped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Agent uninstalled	CA_Event__Quest_ChangeAuditor_Agent_uninstalled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Dell Change Auditor Coordinator set uninstalled	CA_Event__Quest_ChangeAuditor_Coordinator_set_uninstalled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Quota security principal changed	CA_Event__Quota_security_principal_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Quota value changed	CA_Event__Quota_value_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Raw IP Allowed Protocols list changed	CA_Event__Raw_IP_Allowed_Protocols_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Read-Only Domain controller added to domain	CA_Event__Read_Only_Domain_controller_added_to_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Read-Only Domain controller removed from domain	CA_Event__Read_Only_Domain_controller_removed_from_domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Read-Only Domain controller renamed	CA_Event__Read_Only_Domain_controller_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector Added to Server	CA_Event__Receive_Connector_Added_to_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector Logging Level Changed On Server	CA_Event__Receive_Connector_Logging_Level_Changed_On_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector Removed From Server	CA_Event__Receive_Connector_Removed_From_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector Renamed On Server	CA_Event__Receive_Connector_Renamed_On_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector Response FQDN Changed On Server	CA_Event__Receive_Connector_Response_FQDN_Changed_On_Server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Advertise Client Settings	CA_Event__Receive_Connector___Advertise_Client_Settings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Advertise GSSAPI Authentication	CA_Event__Receive_Connector___Advertise_GSSAPI_Authentication_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Authentication Methods	CA_Event__Receive_Connector___Authentication_Methods_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Banner	CA_Event__Receive_Connector___Banner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Bare Line Feed	CA_Event__Receive_Connector___Bare_Line_Feed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Binary MIME	CA_Event__Receive_Connector___Binary_MIME_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Chunking	CA_Event__Receive_Connector___Chunking_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Comment	CA_Event__Receive_Connector___Comment_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Connection Inactivity Timeout	CA_Event__Receive_Connector___Connection_Inactivity_Timeout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Connection Timeout	CA_Event__Receive_Connector___Connection_Timeout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Created	CA_Event__Receive_Connector___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Default Domain	CA_Event__Receive_Connector___Default_Domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Delivery Status Notification	CA_Event__Receive_Connector___Delivery_Status_Notification_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Domain Security	CA_Event__Receive_Connector___Domain_Security_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Eight Bit MIME	CA_Event__Receive_Connector___Eight_Bit_MIME_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Enabled/Disabled	CA_Event__Receive_Connector___Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Enhanced Status Codes	CA_Event__Receive_Connector___Enhanced_Status_Codes_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Extended Protection Policy	CA_Event__Receive_Connector___Extended_Protection_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Extended Protection TLS Termination At Proxy	CA_Event__Receive_Connector___Extended_Protection_TLS_Termination_At_Proxy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - FQDN Response	CA_Event__Receive_Connector___FQDN_Response_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - IP Address Bindings	CA_Event__Receive_Connector___IP_Address_Bindings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Live Credentials	CA_Event__Receive_Connector___Live_Credentials_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Long Addresses	CA_Event__Receive_Connector___Long_Addresses_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Acknowledgement Delay	CA_Event__Receive_Connector___Max_Acknowledgement_Delay_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Header Size	CA_Event__Receive_Connector___Max_Header_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Hop Count	CA_Event__Receive_Connector___Max_Hop_Count_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Inbound Connections	CA_Event__Receive_Connector___Max_Inbound_Connections_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Local Hop Count	CA_Event__Receive_Connector___Max_Local_Hop_Count_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Logon Failures	CA_Event__Receive_Connector___Max_Logon_Failures_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Message Size	CA_Event__Receive_Connector___Max_Message_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Protocol Errors	CA_Event__Receive_Connector___Max_Protocol_Errors_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Max Recipients per Message	CA_Event__Receive_Connector___Max_Recipients_per_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Message Rate Limit	CA_Event__Receive_Connector___Message_Rate_Limit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Message Rate Source	CA_Event__Receive_Connector___Message_Rate_Source_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - ORAR	CA_Event__Receive_Connector___ORAR_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Permission Groups	CA_Event__Receive_Connector___Permission_Groups_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Per Source Max Inbound Connections	CA_Event__Receive_Connector___Per_Source_Max_Inbound_Connections_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Per Source Max Inbound Connection Percentage	CA_Event__Receive_Connector___Per_Source_Max_Inbound_Connection_Percentage_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Pipelining	CA_Event__Receive_Connector___Pipelining_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Protocol Logging Level	CA_Event__Receive_Connector___Protocol_Logging_Level_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Remote Server IP Addresses	CA_Event__Receive_Connector___Remote_Server_IP_Addresses_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Removed	CA_Event__Receive_Connector___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Renamed	CA_Event__Receive_Connector___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Require EHLO Domain	CA_Event__Receive_Connector___Require_EHLO_Domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Require TLS	CA_Event__Receive_Connector___Require_TLS_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - SIZE SMTP Extension	CA_Event__Receive_Connector___SIZE_SMTP_Extension_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Suppress X Anonymous TLS	CA_Event__Receive_Connector___Suppress_X_Anonymous_TLS_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - Tarpit Interval	CA_Event__Receive_Connector___Tarpit_Interval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receive Connector - TLS Domain Capabilities	CA_Event__Receive_Connector___TLS_Domain_Capabilities_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Receiving IP Address Changed In Receive Connector	CA_Event__Receiving_IP_Address_Changed_In_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Recipient Limit Delivery Option Changed	CA_Event__Recipient_Limit_Delivery_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Recording Idle Timeout Changed In UM Dial Plan	CA_Event__Recording_Idle_Timeout_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Recovery Console: Allow Automatic Administrative Logon policy changed	CA_Event__Recovery_Console__Allow_Automatic_Administrative_Logon_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Recovery Console: Allow Floppy Copy And Access policy changed	CA_Event__Recovery_Console__Allow_Floppy_Copy_And_Access_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Recursion flag changed	CA_Event__Recursion_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Recursion Retry setting changed	CA_Event__Recursion_Retry_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Recursion Timeout setting changed	CA_Event__Recursion_Timeout_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reference resource property created	CA_Event__Reference_resource_property_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reference resource property deleted	CA_Event__Reference_resource_property_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reference resource property description changed	CA_Event__Reference_resource_property_description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reference resource property disabled	CA_Event__Reference_resource_property_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reference resource property display name changed	CA_Event__Reference_resource_property_display_name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reference resource property enabled	CA_Event__Reference_resource_property_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reference resource property permission changed	CA_Event__Reference_resource_property_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Refresh frequency for group membership changed	CA_Event__Refresh_frequency_for_group_membership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Refresh frequency for the list of expanded groups changed	CA_Event__Refresh_frequency_for_the_list_of_expanded_groups_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Refresh interval changed	CA_Event__Refresh_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry auditing template added	CA_Event__Registry_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry auditing template added to agent configuration	CA_Event__Registry_auditing_template_added_to_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry auditing template disabled	CA_Event__Registry_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry auditing template enabled	CA_Event__Registry_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry auditing template removed	CA_Event__Registry_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry auditing template removed from agent configuration	CA_Event__Registry_auditing_template_removed_from_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key added	CA_Event__Registry_key_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key added to Registry policy	CA_Event__Registry_key_added_to_Registry_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key changed in Registry policy	CA_Event__Registry_key_changed_in_Registry_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key DACL changed	CA_Event__Registry_key_DACL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key deleted	CA_Event__Registry_key_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key owner changed	CA_Event__Registry_key_owner_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key removed from Registry policy	CA_Event__Registry_key_removed_from_Registry_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry key SACL changed	CA_Event__Registry_key_SACL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry object added to auditing template	CA_Event__Registry_object_added_to_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry object changed in auditing template	CA_Event__Registry_object_changed_in_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Registry object removed from auditing template	CA_Event__Registry_object_removed_from_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote access permission changed for local user	CA_Event__Remote_access_permission_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Assistance Invitation Time Unit Changed	CA_Event__Remote_Assistance_Invitation_Time_Unit_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Assistance Invitation Time Value Changed	CA_Event__Remote_Assistance_Invitation_Time_Value_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Assistance Option Changed	CA_Event__Remote_Assistance_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Assistance Remote Control Option Changed	CA_Event__Remote_Assistance_Remote_Control_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote control Level of control changed for local user	CA_Event__Remote_control_Level_of_control_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Control Require User's Permission changed for local user	CA_Event__Remote_Control_Require_User_s_Permission_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Desktop Create Invitations for Only Windows Vista or Later Option Changed	CA_Event__Remote_Desktop_Create_Invitations_for_Only_Windows_Vista_or_Later_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Desktop Option Changed	CA_Event__Remote_Desktop_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain Definition Added To Hub Transport Configuration	CA_Event__Remote_Domain_Definition_Added_To_Hub_Transport_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain Definition Removed From Hub Transport Configuration	CA_Event__Remote_Domain_Definition_Removed_From_Hub_Transport_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain Definition Renamed	CA_Event__Remote_Domain_Definition_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Allow Automatic Forward Enabled/Disabled	CA_Event__Remote_Domain___Allow_Automatic_Forward_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Allow Automatic Replies Enabled/Disabled	CA_Event__Remote_Domain___Allow_Automatic_Replies_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Allow Delivery Reports Enabled/Disabled	CA_Event__Remote_Domain___Allow_Delivery_Reports_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Allow Non-Delivery Reports Enabled/Disabled	CA_Event__Remote_Domain___Allow_Non_Delivery_Reports_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Content Type	CA_Event__Remote_Domain___Content_Type_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Created	CA_Event__Remote_Domain___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Deleted	CA_Event__Remote_Domain___Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Display Sender's Name On Messages Enabled/Disabled	CA_Event__Remote_Domain___Display_Sender_s_Name_On_Messages_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Exchange Rich-Text Format	CA_Event__Remote_Domain___Exchange_Rich_Text_Format_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Meeting Forward Notification Enabled/Disabled	CA_Event__Remote_Domain___Meeting_Forward_Notification_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Message Line Wrap Column	CA_Event__Remote_Domain___Message_Line_Wrap_Column_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - MIME Character Set	CA_Event__Remote_Domain___MIME_Character_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Non-Delivery Diagnostic Info Enabled/Disabled	CA_Event__Remote_Domain___Non_Delivery_Diagnostic_Info_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Non-MIME Character Set	CA_Event__Remote_Domain___Non_MIME_Character_Set_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Office 365 Tenant Enabled/Disabled	CA_Event__Remote_Domain___Office_365_Tenant_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Out-of-Office Message Types Delivered	CA_Event__Remote_Domain___Out_of_Office_Message_Types_Delivered_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Recipients Considered Internal	CA_Event__Remote_Domain___Recipients_Considered_Internal_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Renamed	CA_Event__Remote_Domain___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Trusted Mail Inbound Enabled/Disabled	CA_Event__Remote_Domain___Trusted_Mail_Inbound_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Trusted Mail Outbound Enabled/Disabled	CA_Event__Remote_Domain___Trusted_Mail_Outbound_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote Domain - Use Simple Display Names Enabled/Disabled	CA_Event__Remote_Domain___Use_Simple_Display_Names_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote IP Address Changed In Receive Connector	CA_Event__Remote_IP_Address_Changed_In_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remote TSMEnabled	CA_Event__Remote_TSMEnabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remove Computer From Docking Station policy changed	CA_Event__Remove_Computer_From_Docking_Station_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remove meeting forward notifications to the Deleted Items Folder	CA_Event__Remove_meeting_forward_notifications_to_the_Deleted_Items_Folder_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Remove old meeting requests and responses	CA_Event__Remove_old_meeting_requests_and_responses_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Replace A Process Level Token policy changed	CA_Event__Replace_A_Process_Level_Token_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Replication Schedule Changed for Public Folders Database	CA_Event__Replication_Schedule_Changed_for_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Replication Schedule Changed in Public Store	CA_Event__Replication_Schedule_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Replication Style Changed for Public Folders Database	CA_Event__Replication_Style_Changed_for_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Replication Style Changed in Public Store	CA_Event__Replication_Style_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Replicator notify pause after modify delay changed	CA_Event__Replicator_notify_pause_after_modify_delay_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Require User's Permission changed for user object	CA_Event__Require_User_s_Permission_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Reset Account Lockout Counter After Change policy changed	CA_Event__Reset_Account_Lockout_Counter_After_Change_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Add organizer's name to subject	CA_Event__Resource_Information___Add_organizer_s_name_to_subject_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Delete attachments	CA_Event__Resource_Information___Delete_attachments_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Delete comments	CA_Event__Resource_Information___Delete_comments_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Delete non-calendar items	CA_Event__Resource_Information___Delete_non_calendar_items_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Delete subject	CA_Event__Resource_Information___Delete_subject_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Mark pending requests tentative	CA_Event__Resource_Information___Mark_pending_requests_tentative_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Remove private flag on an accepted meeting	CA_Event__Resource_Information___Remove_private_flag_on_an_accepted_meeting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Response message additional text	CA_Event__Resource_Information___Response_message_additional_text_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Response message add additional text	CA_Event__Resource_Information___Response_message_add_additional_text_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Information - Send organizer info	CA_Event__Resource_Information___Send_organizer_info_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource In-Policy Requests - Automatic approval	CA_Event__Resource_In_Policy_Requests___Automatic_approval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource In-Policy Requests - Automatic approval users	CA_Event__Resource_In_Policy_Requests___Automatic_approval_users_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource In-Policy Requests - Delegate approval	CA_Event__Resource_In_Policy_Requests___Delegate_approval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource In-Policy Requests - Delegate approval users	CA_Event__Resource_In_Policy_Requests___Delegate_approval_users_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Out-of-Policy Requests - Allowed to submit	CA_Event__Resource_Out_of_Policy_Requests___Allowed_to_submit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Out-of-Policy Requests - Allowed to submit users	CA_Event__Resource_Out_of_Policy_Requests___Allowed_to_submit_users_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Allow calendar conflicts	CA_Event__Resource_Policy___Allow_calendar_conflicts_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Allow repeating meetings	CA_Event__Resource_Policy___Allow_repeating_meetings_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Booking window days	CA_Event__Resource_Policy___Booking_window_days_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Conflict percentage allowed	CA_Event__Resource_Policy___Conflict_percentage_allowed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Delegates	CA_Event__Resource_Policy___Delegates_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Forward meeting requests to delegates	CA_Event__Resource_Policy___Forward_meeting_requests_to_delegates_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Maximum conflict instances	CA_Event__Resource_Policy___Maximum_conflict_instances_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Maximum duration minutes	CA_Event__Resource_Policy___Maximum_duration_minutes_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Reject repeating meetings ending beyond booking window	CA_Event__Resource_Policy___Reject_repeating_meetings_ending_beyond_booking_window_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Policy - Schedule only during working hours	CA_Event__Resource_Policy___Schedule_only_during_working_hours_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Pool Created	CA_Event__Resource_Pool_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Pool Destroyed	CA_Event__Resource_Pool_Destroyed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Pool Event	CA_Event__Resource_Pool_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Pool Moved	CA_Event__Resource_Pool_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Pool Reconfigured	CA_Event__Resource_Pool_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property created	CA_Event__Resource_property_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property deleted	CA_Event__Resource_property_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property description changed	CA_Event__Resource_property_description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property disabled	CA_Event__Resource_property_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property display name changed	CA_Event__Resource_property_display_name_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property enabled	CA_Event__Resource_property_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property list created	CA_Event__Resource_property_list_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property list deleted	CA_Event__Resource_property_list_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property list description changed	CA_Event__Resource_property_list_description_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property list member added	CA_Event__Resource_property_list_member_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property list member changed	CA_Event__Resource_property_list_member_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property list member removed	CA_Event__Resource_property_list_member_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property list permission changed	CA_Event__Resource_property_list_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property permission changed	CA_Event__Resource_property_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource property suggested values changed	CA_Event__Resource_property_suggested_values_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource Violated	CA_Event__Resource_Violated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource - Capacity	CA_Event__Resource___Capacity_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource - Custom properties	CA_Event__Resource___Custom_properties_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Resource - Property schema	CA_Event__Resource___Property_schema_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Restore Files And Directories policy changed	CA_Event__Restore_Files_And_Directories_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Retain Application Log policy changed	CA_Event__Retain_Application_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Retain Security Log policy changed	CA_Event__Retain_Security_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Retain System Log policy changed	CA_Event__Retain_System_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Retention Method For Application Log policy changed	CA_Event__Retention_Method_For_Application_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Retention Method For Security Log policy changed	CA_Event__Retention_Method_For_Security_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Retention Method For System Log policy changed	CA_Event__Retention_Method_For_System_Log_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Retry interval changed	CA_Event__Retry_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Rich Text Format Changed In Remote Domain Definition	CA_Event__Rich_Text_Format_Changed_In_Remote_Domain_Definition_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: RID FSMO role owner Moved	CA_Event__RID_FSMO_role_owner_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Role Added	CA_Event__Role_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Role Event	CA_Event__Role_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Role Removed	CA_Event__Role_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Role Updated	CA_Event__Role_Updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Round-robin flag changed	CA_Event__Round_robin_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: RPC:Completed	CA_Event__RPC_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: RPC Output Parameter	CA_Event__RPC_Output_Parameter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: RPC Protocol setting changed	CA_Event__RPC_Protocol_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: RPC:Starting	CA_Event__RPC_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Rule added to IP Security Policy Rule List.	CA_Event__Rule_added_to_IP_Security_Policy_Rule_List._1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Rule removed from IP Security Policy Rule List	CA_Event__Rule_removed_from_IP_Security_Policy_Rule_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scan:Started	CA_Event__Scan_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scan:Stopped	CA_Event__Scan_Stopped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scavenging period changed	CA_Event__Scavenging_period_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task	CA_Event__Scheduled_Task_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Completed	CA_Event__Scheduled_Task_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Created	CA_Event__Scheduled_Task_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Email Completed	CA_Event__Scheduled_Task_Email_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Email Failed	CA_Event__Scheduled_Task_Email_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Failed	CA_Event__Scheduled_Task_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Reconfigured	CA_Event__Scheduled_Task_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Removed	CA_Event__Scheduled_Task_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Scheduled Task Started	CA_Event__Scheduled_Task_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schedule changed	CA_Event__Schedule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema attribute added	CA_Event__Schema_attribute_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema attribute Confidential flag changed	CA_Event__Schema_attribute_Confidential_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema attribute defaultHidingValue changed	CA_Event__Schema_attribute_defaultHidingValue_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema attribute GC flag changed	CA_Event__Schema_attribute_GC_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema attribute indexing flag changed	CA_Event__Schema_attribute_indexing_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema attribute RODC Filtered flag changed	CA_Event__Schema_attribute_RODC_Filtered_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema class added	CA_Event__Schema_class_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema class default security descriptor changed	CA_Event__Schema_class_default_security_descriptor_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema FSMO role owner moved	CA_Event__Schema_FSMO_role_owner_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema modifications allowed flag changed	CA_Event__Schema_modifications_allowed_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema object disabled	CA_Event__Schema_object_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema object enabled	CA_Event__Schema_object_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Schema version changed	CA_Event__Schema_version_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Agent added	CA_Event__SDK_Agent_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Event Class added	CA_Event__SDK_Event_Class_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Event Class modified	CA_Event__SDK_Event_Class_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Event Class removed	CA_Event__SDK_Event_Class_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Facility added	CA_Event__SDK_Facility_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Facility modified	CA_Event__SDK_Facility_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Facility removed	CA_Event__SDK_Facility_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SDK Machine added	CA_Event__SDK_Machine_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Secondary Dialing Method Changed In UM Dial Plan	CA_Event__Secondary_Dialing_Method_Changed_In_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Secure cache against pollution flag changed	CA_Event__Secure_cache_against_pollution_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Secure System Partition (For RISC Platforms Only) policy changed	CA_Event__Secure_System_Partition__For_RISC_Platforms_Only__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Security audit log rolled over	CA_Event__Security_audit_log_rolled_over_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Security group created	CA_Event__Security_group_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Security group deleted	CA_Event__Security_group_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Connector Added To Organization Configuration	CA_Event__Send_Connector_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Connector Maximum Message Size Changed	CA_Event__Send_Connector_Maximum_Message_Size_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Connector Protocol Logging Changed	CA_Event__Send_Connector_Protocol_Logging_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Connector Removed From Organization Configuration	CA_Event__Send_Connector_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Connector Renamed	CA_Event__Send_Connector_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Connector Response FQDN Changed	CA_Event__Send_Connector_Response_FQDN_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Connector Status Changed	CA_Event__Send_Connector_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Delivery Reports to Group Owner changed	CA_Event__Send_Delivery_Reports_to_Group_Owner_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Delivery Reports to Message Originator changed	CA_Event__Send_Delivery_Reports_to_Message_Originator_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Out-of-office Messages to Originator changed	CA_Event__Send_Out_of_office_Messages_to_Originator_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Send Port setting changed	CA_Event__Send_Port_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Active User Statistics Log Max Age	CA_Event__Server_Hub_Transport___Active_User_Statistics_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Active User Statistics Log Max Directory Size	CA_Event__Server_Hub_Transport___Active_User_Statistics_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Active User Statistics Log Max File Size	CA_Event__Server_Hub_Transport___Active_User_Statistics_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Active User Statistics Log Path	CA_Event__Server_Hub_Transport___Active_User_Statistics_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Anti-Spam Agents Enabled/Disabled	CA_Event__Server_Hub_Transport___Anti_Spam_Agents_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Connectivity Log Enabled/Disabled	CA_Event__Server_Hub_Transport___Connectivity_Log_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Connectivity Log Max Age	CA_Event__Server_Hub_Transport___Connectivity_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Connectivity Log Max Directory Size	CA_Event__Server_Hub_Transport___Connectivity_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Connectivity Log Max File Size	CA_Event__Server_Hub_Transport___Connectivity_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Connectivity Log Path	CA_Event__Server_Hub_Transport___Connectivity_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Content Conversion Tracing Enabled/Disabled	CA_Event__Server_Hub_Transport___Content_Conversion_Tracing_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - External DNS Adapter	CA_Event__Server_Hub_Transport___External_DNS_Adapter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - External DNS Adapter GUID	CA_Event__Server_Hub_Transport___External_DNS_Adapter_GUID_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - External DNS Protocol	CA_Event__Server_Hub_Transport___External_DNS_Protocol_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - External DNS Servers	CA_Event__Server_Hub_Transport___External_DNS_Servers_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - External IP Address	CA_Event__Server_Hub_Transport___External_IP_Address_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Information Rights Management Log Enabled/Disabled	CA_Event__Server_Hub_Transport___Information_Rights_Management_Log_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Information Rights Management Log Max Age	CA_Event__Server_Hub_Transport___Information_Rights_Management_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Information Rights Management Log Max Directory Size	CA_Event__Server_Hub_Transport___Information_Rights_Management_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Information Rights Management Log Max File Size	CA_Event__Server_Hub_Transport___Information_Rights_Management_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Information Rights Management Log Path	CA_Event__Server_Hub_Transport___Information_Rights_Management_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Internal DNS Adapter	CA_Event__Server_Hub_Transport___Internal_DNS_Adapter_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Internal DNS Adapter GUID	CA_Event__Server_Hub_Transport___Internal_DNS_Adapter_GUID_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Internal DNS Protocol	CA_Event__Server_Hub_Transport___Internal_DNS_Protocol_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Internal DNS Servers	CA_Event__Server_Hub_Transport___Internal_DNS_Servers_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Intra-Organization Connector Protocol Log Level	CA_Event__Server_Hub_Transport___Intra_Organization_Connector_Protocol_Log_Level_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Intra-Organization Connector SMTP Max Messages Per Connection	CA_Event__Server_Hub_Transport___Intra_Organization_Connector_SMTP_Max_Messages_Per_Connection_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Maximum Outbound Connections	CA_Event__Server_Hub_Transport___Maximum_Outbound_Connections_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Maximum Outbound Connections per Domain	CA_Event__Server_Hub_Transport___Maximum_Outbound_Connections_per_Domain_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Max Concurrent Mailbox Deliveries	CA_Event__Server_Hub_Transport___Max_Concurrent_Mailbox_Deliveries_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Max Concurrent Mailbox Submissions	CA_Event__Server_Hub_Transport___Max_Concurrent_Mailbox_Submissions_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Max Connection Rate Per Minute	CA_Event__Server_Hub_Transport___Max_Connection_Rate_Per_Minute_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Delayed Notification	CA_Event__Server_Hub_Transport___Message_Delayed_Notification_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Expiration Days	CA_Event__Server_Hub_Transport___Message_Expiration_Days_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Retry Interval	CA_Event__Server_Hub_Transport___Message_Retry_Interval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Tracking Log Enabled/Disabled	CA_Event__Server_Hub_Transport___Message_Tracking_Log_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Tracking Log Max Age	CA_Event__Server_Hub_Transport___Message_Tracking_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Tracking Log Max Directory Size	CA_Event__Server_Hub_Transport___Message_Tracking_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Tracking Log Max File Size	CA_Event__Server_Hub_Transport___Message_Tracking_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Tracking Log Path	CA_Event__Server_Hub_Transport___Message_Tracking_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Message Tracking Log Subject Logging Enabled/Disabled	CA_Event__Server_Hub_Transport___Message_Tracking_Log_Subject_Logging_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Outbound Connection Failure Retry Interval	CA_Event__Server_Hub_Transport___Outbound_Connection_Failure_Retry_Interval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Pickup Directory Max Header Size	CA_Event__Server_Hub_Transport___Pickup_Directory_Max_Header_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Pickup Directory Max Messages Per Minute	CA_Event__Server_Hub_Transport___Pickup_Directory_Max_Messages_Per_Minute_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Pickup Directory Max Recipients Per Message	CA_Event__Server_Hub_Transport___Pickup_Directory_Max_Recipients_Per_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Pickup Directory Path	CA_Event__Server_Hub_Transport___Pickup_Directory_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Pipeline Tracing Enabled/Disabled	CA_Event__Server_Hub_Transport___Pipeline_Tracing_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Pipeline Tracing Path	CA_Event__Server_Hub_Transport___Pipeline_Tracing_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Pipeline Tracing Sender Address	CA_Event__Server_Hub_Transport___Pipeline_Tracing_Sender_Address_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Poison Message Detection Enabled/Disabled	CA_Event__Server_Hub_Transport___Poison_Message_Detection_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Poison Message Threshold	CA_Event__Server_Hub_Transport___Poison_Message_Threshold_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Queue Max Idle Time	CA_Event__Server_Hub_Transport___Queue_Max_Idle_Time_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Receive Protocol Log Max Age	CA_Event__Server_Hub_Transport___Receive_Protocol_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Receive Protocol Log Max Directory Size	CA_Event__Server_Hub_Transport___Receive_Protocol_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Receive Protocol Log Max File Size	CA_Event__Server_Hub_Transport___Receive_Protocol_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Receive Protocol Log Path	CA_Event__Server_Hub_Transport___Receive_Protocol_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Recipient Validation Cache Enabled/Disabled	CA_Event__Server_Hub_Transport___Recipient_Validation_Cache_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Replay Directory Path	CA_Event__Server_Hub_Transport___Replay_Directory_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Root Drop Directory Path	CA_Event__Server_Hub_Transport___Root_Drop_Directory_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Routing Table Log Max Age	CA_Event__Server_Hub_Transport___Routing_Table_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Routing Table Log Max Directory Size	CA_Event__Server_Hub_Transport___Routing_Table_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Routing Table Log Path	CA_Event__Server_Hub_Transport___Routing_Table_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Send Protocol Log Max Age	CA_Event__Server_Hub_Transport___Send_Protocol_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Send Protocol Log Max Directory Size	CA_Event__Server_Hub_Transport___Send_Protocol_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Send Protocol Log Max File Size	CA_Event__Server_Hub_Transport___Send_Protocol_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Send Protocol Log Path	CA_Event__Server_Hub_Transport___Send_Protocol_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Server Statistics Log Max Age	CA_Event__Server_Hub_Transport___Server_Statistics_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Server Statistics Log Max Directory Size	CA_Event__Server_Hub_Transport___Server_Statistics_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Server Statistics Log Max File Size	CA_Event__Server_Hub_Transport___Server_Statistics_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Server Statistics Log Path	CA_Event__Server_Hub_Transport___Server_Statistics_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Transient Failure Retry Attempts	CA_Event__Server_Hub_Transport___Transient_Failure_Retry_Attempts_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Transient Failure Retry Interval	CA_Event__Server_Hub_Transport___Transient_Failure_Retry_Interval_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Hub Transport - Use Downgraded Exchange Server Authentication	CA_Event__Server_Hub_Transport___Use_Downgraded_Exchange_Server_Authentication_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server License Expired	CA_Event__Server_License_Expired_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Memory Decrease	CA_Event__Server_Memory_Decrease_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Memory Increase	CA_Event__Server_Memory_Increase_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Server Started Session	CA_Event__Server_Started_Session_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service account changed	CA_Event__Service_account_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service added to auditing template	CA_Event__Service_added_to_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service Added to Delegation List for user object	CA_Event__Service_Added_to_Delegation_List_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service auditing template added	CA_Event__Service_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service auditing template added to agent configuration	CA_Event__Service_auditing_template_added_to_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service auditing template changed	CA_Event__Service_auditing_template_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service auditing template disabled	CA_Event__Service_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service auditing template enabled	CA_Event__Service_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service auditing template removed	CA_Event__Service_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service auditing template removed from agent configuration	CA_Event__Service_auditing_template_removed_from_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service defined in System Services policy	CA_Event__Service_defined_in_System_Services_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service dependencies changed	CA_Event__Service_dependencies_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service log level changed	CA_Event__Service_log_level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service paused	CA_Event__Service_paused_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service recovery actions changed	CA_Event__Service_recovery_actions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service removed from auditing template	CA_Event__Service_removed_from_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service Removed from Delegation List for user object	CA_Event__Service_Removed_from_Delegation_List_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service resumed	CA_Event__Service_resumed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service started	CA_Event__Service_started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service startup changed in System Services policy	CA_Event__Service_startup_changed_in_System_Services_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service start type changed	CA_Event__Service_start_type_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service stopped	CA_Event__Service_stopped_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Service undefined in System Services policy	CA_Event__Service_undefined_in_System_Services_policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Session Event	CA_Event__Session_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Session limit action changed for local user	CA_Event__Session_limit_action_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Session Terminated	CA_Event__Session_Terminated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shadow copy created	CA_Event__Shadow_copy_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shadow copy deleted	CA_Event__Shadow_copy_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shadow copy rolled back	CA_Event__Shadow_copy_rolled_back_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shared Mailbox Folder Permissions Changed	CA_Event__Shared_Mailbox_Folder_Permissions_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shared Mailbox Opened	CA_Event__Shared_Mailbox_Opened_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint auditing template added	CA_Event__SharePoint_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint auditing template disabled	CA_Event__SharePoint_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint auditing template enabled	CA_Event__SharePoint_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint auditing template removed	CA_Event__SharePoint_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint event added	CA_Event__SharePoint_event_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint event removed	CA_Event__SharePoint_event_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint facility added	CA_Event__SharePoint_facility_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint facility removed	CA_Event__SharePoint_facility_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint folder added	CA_Event__SharePoint_folder_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint folder deleted	CA_Event__SharePoint_folder_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint folder moved	CA_Event__SharePoint_folder_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint folder renamed	CA_Event__SharePoint_folder_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint folder restored from recycle bin	CA_Event__SharePoint_folder_restored_from_recycle_bin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint folder updated	CA_Event__SharePoint_folder_updated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint path added to auditing template	CA_Event__SharePoint_path_added_to_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint path changed in auditing template	CA_Event__SharePoint_path_changed_in_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SharePoint path removed from auditing template	CA_Event__SharePoint_path_removed_from_auditing_template_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy added	CA_Event__Sharing_Policy_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy Default setting changed	CA_Event__Sharing_Policy_Default_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy Domains setting changed	CA_Event__Sharing_Policy_Domains_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy Enabled setting changed	CA_Event__Sharing_Policy_Enabled_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy removed	CA_Event__Sharing_Policy_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy renamed	CA_Event__Sharing_Policy_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy - Created	CA_Event__Sharing_Policy___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy - Default	CA_Event__Sharing_Policy___Default_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy - Domains	CA_Event__Sharing_Policy___Domains_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy - Enabled/Disabled	CA_Event__Sharing_Policy___Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy - Removed	CA_Event__Sharing_Policy___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sharing Policy - Renamed	CA_Event__Sharing_Policy___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan All	CA_Event__Showplan_All_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan All for Query Compile	CA_Event__Showplan_All_for_Query_Compile_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan Statistics Profile	CA_Event__Showplan_Statistics_Profile_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan Text	CA_Event__Showplan_Text_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan Text (Unencoded)	CA_Event__Showplan_Text__Unencoded__1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan XML	CA_Event__Showplan_XML_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan XML For Query Compile	CA_Event__Showplan_XML_For_Query_Compile_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Showplan XML Statistics Profile	CA_Event__Showplan_XML_Statistics_Profile_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shutdown: Allow System To Be Shut Down Without Having To Log On policy changed	CA_Event__Shutdown__Allow_System_To_Be_Shut_Down_Without_Having_To_Log_On_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shutdown: Clear Virtual Memory Pagefile policy changed	CA_Event__Shutdown__Clear_Virtual_Memory_Pagefile_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shut Down The Computer When The Security Audit Log Is Full policy changed	CA_Event__Shut_Down_The_Computer_When_The_Security_Audit_Log_Is_Full_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Shut Down The System policy changed	CA_Event__Shut_Down_The_System_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site added	CA_Event__Site_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site added to site list	CA_Event__Site_added_to_site_list_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site collection created	CA_Event__Site_collection_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site collection deleted	CA_Event__Site_collection_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site collection ownership granted	CA_Event__Site_collection_ownership_granted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site collection ownership revoked	CA_Event__Site_collection_ownership_revoked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site created	CA_Event__Site_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site deleted	CA_Event__Site_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site group policy order changed	CA_Event__Site_group_policy_order_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site license server changed	CA_Event__Site_license_server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site link added	CA_Event__Site_link_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site link added to site link bridge	CA_Event__Site_link_added_to_site_link_bridge_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site link bridge added	CA_Event__Site_link_bridge_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site link bridge removed	CA_Event__Site_link_bridge_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site link removed	CA_Event__Site_link_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site link removed from site link bridge	CA_Event__Site_link_removed_from_site_link_bridge_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site moved	CA_Event__Site_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site removed	CA_Event__Site_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site removed from site list	CA_Event__Site_removed_from_site_list_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Site renamed	CA_Event__Site_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Smart Host Added To Send Connector	CA_Event__Smart_Host_Added_To_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Smart Host Authentication Settings Changed on Send Connector	CA_Event__Smart_Host_Authentication_Settings_Changed_on_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Smart Host Removed From Send Connector	CA_Event__Smart_Host_Removed_From_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting disabled	CA_Event__SMTP_alerting_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting email format changed	CA_Event__SMTP_alerting_email_format_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting enabled	CA_Event__SMTP_alerting_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting from address changed	CA_Event__SMTP_alerting_from_address_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting server authentication disabled	CA_Event__SMTP_alerting_server_authentication_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting server authentication enabled	CA_Event__SMTP_alerting_server_authentication_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting server changed	CA_Event__SMTP_alerting_server_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting server password changed	CA_Event__SMTP_alerting_server_password_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SMTP alerting server username changed	CA_Event__SMTP_alerting_server_username_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sort Warnings - Multiple Pass	CA_Event__Sort_Warnings___Multiple_Pass_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Sort Warnings - Single Pass	CA_Event__Sort_Warnings___Single_Pass_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Source Server Added To Send Connector	CA_Event__Source_Server_Added_To_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Source Server Removed From Send Connector	CA_Event__Source_Server_Removed_From_Send_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Speech-Enabled Option Changed for UM Auto Attendant	CA_Event__Speech_Enabled_Option_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:CacheHit - Compplan Hit	CA_Event__SP_CacheHit___Compplan_Hit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:CacheHit - Execution Context Hit	CA_Event__SP_CacheHit___Execution_Context_Hit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:CacheInsert	CA_Event__SP_CacheInsert_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:CacheMiss	CA_Event__SP_CacheMiss_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:CacheRemove - Compplan Remove	CA_Event__SP_CacheRemove___Compplan_Remove_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:CacheRemove - Proc Cache Flush	CA_Event__SP_CacheRemove___Proc_Cache_Flush_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Completed	CA_Event__SP_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Browse Perms Changed	CA_Event__SP_Recompile___Browse_Perms_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Cursor Options Changed	CA_Event__SP_Recompile___Cursor_Options_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - MPI View Changed	CA_Event__SP_Recompile___MPI_View_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Query Notification Environment Changed	CA_Event__SP_Recompile___Query_Notification_Environment_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Recompile DNR	CA_Event__SP_Recompile___Recompile_DNR_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Recompile Option	CA_Event__SP_Recompile___Recompile_Option_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Remote Rowset Changed	CA_Event__SP_Recompile___Remote_Rowset_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Schema Changed	CA_Event__SP_Recompile___Schema_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Set Option Changed	CA_Event__SP_Recompile___Set_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Statistics Changed	CA_Event__SP_Recompile___Statistics_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Recompile - Temp Table Changed	CA_Event__SP_Recompile___Temp_Table_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:Starting	CA_Event__SP_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:StmtCompleted	CA_Event__SP_StmtCompleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SP:StmtStarting	CA_Event__SP_StmtStarting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL auditing template added	CA_Event__SQL_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL auditing template added to agent configuration	CA_Event__SQL_auditing_template_added_to_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL auditing template disabled	CA_Event__SQL_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL auditing template enabled	CA_Event__SQL_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL auditing template removed	CA_Event__SQL_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL auditing template removed from agent configuration	CA_Event__SQL_auditing_template_removed_from_agent_configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:BatchCompleted	CA_Event__SQL_BatchCompleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:BatchStarting	CA_Event__SQL_BatchStarting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL event added	CA_Event__SQL_event_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL event removed	CA_Event__SQL_event_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL facility added	CA_Event__SQL_facility_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL facility removed	CA_Event__SQL_facility_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL filter added	CA_Event__SQL_filter_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL filter removed	CA_Event__SQL_filter_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:FullTextQuery	CA_Event__SQL_FullTextQuery_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL instance added	CA_Event__SQL_instance_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL instance removed	CA_Event__SQL_instance_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtCompleted	CA_Event__SQL_StmtCompleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Browse Permissions Changed	CA_Event__SQL_StmtRecompile___Browse_Permissions_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Cursor Options Changed	CA_Event__SQL_StmtRecompile___Cursor_Options_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Deferred Compile	CA_Event__SQL_StmtRecompile___Deferred_Compile_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Options Requested	CA_Event__SQL_StmtRecompile___Options_Requested_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Partition View Changed	CA_Event__SQL_StmtRecompile___Partition_View_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Query Notification Environment Changed	CA_Event__SQL_StmtRecompile___Query_Notification_Environment_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Remote Rowset Changed	CA_Event__SQL_StmtRecompile___Remote_Rowset_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Schema Changed	CA_Event__SQL_StmtRecompile___Schema_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Set Option Changed	CA_Event__SQL_StmtRecompile___Set_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Statistics Changed	CA_Event__SQL_StmtRecompile___Statistics_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtRecompile - Temp Table Changed	CA_Event__SQL_StmtRecompile___Temp_Table_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL:StmtStarting	CA_Event__SQL_StmtStarting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL Transaction Begin	CA_Event__SQL_Transaction_Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL Transaction Commit	CA_Event__SQL_Transaction_Commit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL Transaction Rollback	CA_Event__SQL_Transaction_Rollback_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SQL Transaction Savepoint	CA_Event__SQL_Transaction_Savepoint_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Starter GPO Computer setting changed	CA_Event__Starter_GPO_Computer_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Starter GPO created	CA_Event__Starter_GPO_created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Starter GPO removed	CA_Event__Starter_GPO_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Starter GPO User setting changed	CA_Event__Starter_GPO_User_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Starting Directory changed for user object	CA_Event__Starting_Directory_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Starting Program changed for user object	CA_Event__Starting_Program_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Start The Following Program At Logon changed for local user	CA_Event__Start_The_Following_Program_At_Logon_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: State/Province changed on user object	CA_Event__State_Province_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Static IP address changed	CA_Event__Static_IP_address_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Storage group added to Exchange server	CA_Event__Storage_group_added_to_Exchange_server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Storage group removed from Exchange server	CA_Event__Storage_group_removed_from_Exchange_server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Storage group renamed in Exchange server	CA_Event__Storage_group_renamed_in_Exchange_server_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Store Passwords Using Reversible Encryption policy changed	CA_Event__Store_Passwords_Using_Reversible_Encryption_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Street Address changed on user object	CA_Event__Street_Address_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: String registry value added	CA_Event__String_registry_value_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: String registry value changed	CA_Event__String_registry_value_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: String registry value deleted	CA_Event__String_registry_value_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subnet added	CA_Event__Subnet_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subnet mask changed	CA_Event__Subnet_mask_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subnet removed	CA_Event__Subnet_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subnet site assignment changed	CA_Event__Subnet_site_assignment_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subordinate OU added	CA_Event__Subordinate_OU_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subordinate OU removed	CA_Event__Subordinate_OU_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subordinate OU renamed	CA_Event__Subordinate_OU_renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subscriber Access Number Added To UM Dial Plan	CA_Event__Subscriber_Access_Number_Added_To_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Subscriber Access Number Removed From UM Dial Plan	CA_Event__Subscriber_Access_Number_Removed_From_UM_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Suspend Local Continuous Replication Status Changed	CA_Event__Suspend_Local_Continuous_Replication_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Synchronize Directory Service Data policy changed	CA_Event__Synchronize_Directory_Service_Data_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System Cryptography: Force Strong Key Protection For User Keys Stored On The Computer policy changed	CA_Event__System_Cryptography__Force_Strong_Key_Protection_For_User_Keys_Stored_On_The_Computer_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System Cryptography: Use FIPS Compliant Algorithms For Encryption, Hashing, and Signing policy changed	CA_Event__System_Cryptography__Use_FIPS_Compliant_Algorithms_For_Encryption_Hashing_and_Signing_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System Event Log Cleared	CA_Event__System_Event_Log_Cleared_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System Objects: Default Owner For Objects Created By Members Of The Administrators Group policy changed	CA_Event__System_Objects__Default_Owner_For_Objects_Created_By_Members_Of_The_Administrators_Group_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System Objects: Require Case Insensitivity For Non-Windows Subsystems Policy changed	CA_Event__System_Objects__Require_Case_Insensitivity_For_Non_Windows_Subsystems_Policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) policy changed	CA_Event__System_objects__Strengthen_default_permissions_of_internal_system_objects__e.g._Symbolic_Links__policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System path location changed in server storage group	CA_Event__System_path_location_changed_in_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System Settings: Optional Subsystems policy changed	CA_Event__System_Settings__Optional_Subsystems_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System Settings: Use Certificate Rules On Windows Executables For Software Restriction Policies changed	CA_Event__System_Settings__Use_Certificate_Rules_On_Windows_Executables_For_Software_Restriction_Policies_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System: Audit IPsec Driver changed	CA_Event__System__Audit_IPsec_Driver_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System: Audit Other System Events changed	CA_Event__System__Audit_Other_System_Events_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System: Audit Security State Change modified	CA_Event__System__Audit_Security_State_Change_modified_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System: Audit Security System Extension changed	CA_Event__System__Audit_Security_System_Extension_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: System: Audit System Integrity changed	CA_Event__System__Audit_System_Integrity_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SYSVOL folder access rights changed	CA_Event__SYSVOL_folder_access_rights_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SYSVOL folder auditing changed	CA_Event__SYSVOL_folder_auditing_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SYSVOL folder ownership changed	CA_Event__SYSVOL_folder_ownership_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: SYSVOL location changed	CA_Event__SYSVOL_location_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Take Ownership Of Files Or Other Objects policy changed	CA_Event__Take_Ownership_Of_Files_Or_Other_Objects_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Tasks Opened by Non-Owner	CA_Event__Tasks_Opened_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Tasks Opened by Owner	CA_Event__Tasks_Opened_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Copied by Non-Owner	CA_Event__Task_Copied_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Copied by Owner	CA_Event__Task_Copied_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Copied in Shared Mailbox	CA_Event__Task_Copied_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Created by Non-Owner	CA_Event__Task_Created_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Created by Owner	CA_Event__Task_Created_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Created in Shared Mailbox	CA_Event__Task_Created_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Deleted by Non-Owner	CA_Event__Task_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Deleted by Owner	CA_Event__Task_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Deleted in Shared Mailbox	CA_Event__Task_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Event	CA_Event__Task_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Modified by Non-Owner	CA_Event__Task_Modified_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Modified by Owner	CA_Event__Task_Modified_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Modified in Shared Mailbox	CA_Event__Task_Modified_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Moved by Non-Owner	CA_Event__Task_Moved_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Moved by Owner	CA_Event__Task_Moved_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Moved in Shared Mailbox	CA_Event__Task_Moved_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Permanently Deleted by Non-Owner	CA_Event__Task_Permanently_Deleted_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Permanently Deleted by Owner	CA_Event__Task_Permanently_Deleted_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Permanently Deleted in Shared Mailbox	CA_Event__Task_Permanently_Deleted_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Read by Non-Owner	CA_Event__Task_Read_by_Non_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Read by Owner	CA_Event__Task_Read_by_Owner_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Read in Shared Mailbox	CA_Event__Task_Read_in_Shared_Mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Task Timeout Event	CA_Event__Task_Timeout_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TCP Allowed Port list changed	CA_Event__TCP_Allowed_Port_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TCP/IP Filtering changed	CA_Event__TCP_IP_Filtering_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Telephone notes changed on user object	CA_Event__Telephone_notes_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Telephone Number changed on user object	CA_Event__Telephone_Number_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Template Being Upgraded	CA_Event__Template_Being_Upgraded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Template Upgraded	CA_Event__Template_Upgraded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Template Upgrade Event	CA_Event__Template_Upgrade_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Template Upgrade Failed	CA_Event__Template_Upgrade_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services home folder drive changed	CA_Event__Terminal_Services_home_folder_drive_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services Home folder mapped drive changed for local user	CA_Event__Terminal_Services_Home_folder_mapped_drive_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services home folder path changed	CA_Event__Terminal_Services_home_folder_path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services Home folder path changed for local user	CA_Event__Terminal_Services_Home_folder_path_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services home folder type changed	CA_Event__Terminal_Services_home_folder_type_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services logon permission changed	CA_Event__Terminal_Services_logon_permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services profile path changed for local user	CA_Event__Terminal_Services_profile_path_changed_for_local_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Terminal Services user profile path changed	CA_Event__Terminal_Services_user_profile_path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: The number of groups to expand per cycle changed	CA_Event__The_number_of_groups_to_expand_per_cycle_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: This Database Can Be Overwritten By A Restore changed for Mailbox database	CA_Event__This_Database_Can_Be_Overwritten_By_A_Restore_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: This Database Can Be Overwritten By A Restore changed for Mailbox store	CA_Event__This_Database_Can_Be_Overwritten_By_A_Restore_changed_for_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Timed Out Host Operation	CA_Event__Timed_Out_Host_Operation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Time Zone Changed for UM Auto Attendant	CA_Event__Time_Zone_Changed_for_UM_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Title changed for user object	CA_Event__Title_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TLS Authentication Option changed on Receive Connector	CA_Event__TLS_Authentication_Option_changed_on_Receive_Connector_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Begin Tran Completed	CA_Event__TM__Begin_Tran_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Begin Tran Starting	CA_Event__TM__Begin_Tran_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Commit Tran Completed - Commit	CA_Event__TM__Commit_Tran_Completed___Commit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Commit Tran Completed - Commit and Begin	CA_Event__TM__Commit_Tran_Completed___Commit_and_Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Commit Tran Starting - Commit	CA_Event__TM__Commit_Tran_Starting___Commit_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Commit Tran Starting - Commit and Begin	CA_Event__TM__Commit_Tran_Starting___Commit_and_Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Promote Tran Completed	CA_Event__TM__Promote_Tran_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Promote Tran Starting	CA_Event__TM__Promote_Tran_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Rollback Tran Completed - Rollback	CA_Event__TM__Rollback_Tran_Completed___Rollback_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Rollback Tran Completed - Rollback and Begin	CA_Event__TM__Rollback_Tran_Completed___Rollback_and_Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Rollback Tran Starting - Rollback	CA_Event__TM__Rollback_Tran_Starting___Rollback_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Rollback Tran Starting - Rollback and Begin	CA_Event__TM__Rollback_Tran_Starting___Rollback_and_Begin_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Save Tran Completed	CA_Event__TM__Save_Tran_Completed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TM: Save Tran Starting	CA_Event__TM__Save_Tran_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Tombstone quota factor for partition changed	CA_Event__Tombstone_quota_factor_for_partition_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Trace File Close	CA_Event__Trace_File_Close_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: TransactionLog	CA_Event__TransactionLog_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transaction Log location changed in server storage group	CA_Event__Transaction_Log_location_changed_in_server_storage_group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transaction status changed	CA_Event__Transaction_status_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transfer Connect Timeout setting changed	CA_Event__Transfer_Connect_Timeout_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transport Dumpster Maximum Retention Time setting changed	CA_Event__Transport_Dumpster_Maximum_Retention_Time_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transport Dumpster Maximum Size per Mailbox Database setting changed	CA_Event__Transport_Dumpster_Maximum_Size_per_Mailbox_Database_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transport Rule Added To Organization Configuration	CA_Event__Transport_Rule_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transport Rule Changed	CA_Event__Transport_Rule_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transport Rule Priority changed	CA_Event__Transport_Rule_Priority_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transport Rule Removed From Organization Configuration	CA_Event__Transport_Rule_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Transport Rule Renamed	CA_Event__Transport_Rule_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Trusted People added	CA_Event__Trusted_People_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Trusted People changed	CA_Event__Trusted_People_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Trusted People removed	CA_Event__Trusted_People_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Trust added	CA_Event__Trust_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Trust removed	CA_Event__Trust_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UDP Allowed Port list changed	CA_Event__UDP_Allowed_Port_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Auto Attendant Added To Organization Configuration	CA_Event__UM_Auto_Attendant_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Auto Attendant Removed From Organization Configuration	CA_Event__UM_Auto_Attendant_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Auto Attendant Renamed	CA_Event__UM_Auto_Attendant_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Auto Attendant Status Changed	CA_Event__UM_Auto_Attendant_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan Added To Organization Configuration	CA_Event__UM_Dial_Plan_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan Removed From Organization Configuration	CA_Event__UM_Dial_Plan_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan Renamed	CA_Event__UM_Dial_Plan_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Access Telephone Numbers	CA_Event__UM_Dial_Plan___Access_Telephone_Numbers_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Allowed International Rule Groups	CA_Event__UM_Dial_Plan___Allowed_International_Rule_Groups_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Allowed In-Country/Region Rule Groups	CA_Event__UM_Dial_Plan___Allowed_In_Country_Region_Rule_Groups_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Allow Calling Line ID Resolution via Active Directory	CA_Event__UM_Dial_Plan___Allow_Calling_Line_ID_Resolution_via_Active_Directory_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Allow Calls to Extensions	CA_Event__UM_Dial_Plan___Allow_Calls_to_Extensions_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Allow Calls to Users Within Same Dial Plan	CA_Event__UM_Dial_Plan___Allow_Calls_to_Users_Within_Same_Dial_Plan_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Audio Codec	CA_Event__UM_Dial_Plan___Audio_Codec_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Automatic Speech Recognition Enabled/Disabled	CA_Event__UM_Dial_Plan___Automatic_Speech_Recognition_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Callers Can Contact	CA_Event__UM_Dial_Plan___Callers_Can_Contact_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Callers Can Contact Address List	CA_Event__UM_Dial_Plan___Callers_Can_Contact_Address_List_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Callers Can Contact Auto Attendant	CA_Event__UM_Dial_Plan___Callers_Can_Contact_Auto_Attendant_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Callers Can Contact Extension	CA_Event__UM_Dial_Plan___Callers_Can_Contact_Extension_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Call Answering Rules Enabled/Disabled	CA_Event__UM_Dial_Plan___Call_Answering_Rules_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Country/Region Code	CA_Event__UM_Dial_Plan___Country_Region_Code_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Created	CA_Event__UM_Dial_Plan___Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Default Language	CA_Event__UM_Dial_Plan___Default_Language_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Default Outbound Calling Line ID	CA_Event__UM_Dial_Plan___Default_Outbound_Calling_Line_ID_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Dial By Name Primary Method	CA_Event__UM_Dial_Plan___Dial_By_Name_Primary_Method_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Dial By Name Secondary Method	CA_Event__UM_Dial_Plan___Dial_By_Name_Secondary_Method_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Equivalent Dial Plans	CA_Event__UM_Dial_Plan___Equivalent_Dial_Plans_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Fax Enabled/Disabled	CA_Event__UM_Dial_Plan___Fax_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Informational Announcement	CA_Event__UM_Dial_Plan___Informational_Announcement_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Informational Announcement File	CA_Event__UM_Dial_Plan___Informational_Announcement_File_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Input Failures Before Disconnect	CA_Event__UM_Dial_Plan___Input_Failures_Before_Disconnect_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - International Access Code	CA_Event__UM_Dial_Plan___International_Access_Code_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - International Number Format	CA_Event__UM_Dial_Plan___International_Number_Format_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - International Rule Groups	CA_Event__UM_Dial_Plan___International_Rule_Groups_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - In-Country/Region Number Format	CA_Event__UM_Dial_Plan___In_Country_Region_Number_Format_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - In-Country/Region Rule Groups	CA_Event__UM_Dial_Plan___In_Country_Region_Rule_Groups_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Legacy Prompt Publishing Point	CA_Event__UM_Dial_Plan___Legacy_Prompt_Publishing_Point_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Logon Failures Before Disconnect	CA_Event__UM_Dial_Plan___Logon_Failures_Before_Disconnect_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Matched Name Selection Method	CA_Event__UM_Dial_Plan___Matched_Name_Selection_Method_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Maximum Call Duration	CA_Event__UM_Dial_Plan___Maximum_Call_Duration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Maximum Recording Duration	CA_Event__UM_Dial_Plan___Maximum_Recording_Duration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - National Number Prefix	CA_Event__UM_Dial_Plan___National_Number_Prefix_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Numbering Plan Formats	CA_Event__UM_Dial_Plan___Numbering_Plan_Formats_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Operator Extension	CA_Event__UM_Dial_Plan___Operator_Extension_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Outside Line Access Code	CA_Event__UM_Dial_Plan___Outside_Line_Access_Code_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Pilot Numbers	CA_Event__UM_Dial_Plan___Pilot_Numbers_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Recording Idle Time-out	CA_Event__UM_Dial_Plan___Recording_Idle_Time_out_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Removed	CA_Event__UM_Dial_Plan___Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Send Voice Messages Enabled/Disabled	CA_Event__UM_Dial_Plan___Send_Voice_Messages_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Telephone User Interface Prompt Editing	CA_Event__UM_Dial_Plan___Telephone_User_Interface_Prompt_Editing_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Transfer to Users Enabled/Disabled	CA_Event__UM_Dial_Plan___Transfer_to_Users_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - VOIP Security	CA_Event__UM_Dial_Plan___VOIP_Security_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Welcome Greeting	CA_Event__UM_Dial_Plan___Welcome_Greeting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Dial Plan - Welcome Greeting Filename	CA_Event__UM_Dial_Plan___Welcome_Greeting_Filename_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM IP Gateway Added To Organization Configuration	CA_Event__UM_IP_Gateway_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM IP Gateway Removed From Organization Configuration	CA_Event__UM_IP_Gateway_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM IP Gateway Renamed	CA_Event__UM_IP_Gateway_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM IP Gateway Status Changed	CA_Event__UM_IP_Gateway_Status_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox Policy Added To Organization Configuration	CA_Event__UM_Mailbox_Policy_Added_To_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox Policy Removed From Organization Configuration	CA_Event__UM_Mailbox_Policy_Removed_From_Organization_Configuration_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox Policy Renamed	CA_Event__UM_Mailbox_Policy_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Allow Edit of Call Answering Rules	CA_Event__UM_Mailbox___Allow_Edit_of_Call_Answering_Rules_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Allow Missing Caller ID Diverted Calls to Leave Message	CA_Event__UM_Mailbox___Allow_Missing_Caller_ID_Diverted_Calls_to_Leave_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Allow non-user UM calls	CA_Event__UM_Mailbox___Allow_non_user_UM_calls_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Allow Received Faxes	CA_Event__UM_Mailbox___Allow_Received_Faxes_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Automatic Speech Recognition Enabled/Disabled	CA_Event__UM_Mailbox___Automatic_Speech_Recognition_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Call Answering Audio Codec	CA_Event__UM_Mailbox___Call_Answering_Audio_Codec_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Disabled	CA_Event__UM_Mailbox___Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Enabled	CA_Event__UM_Mailbox___Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Extension	CA_Event__UM_Mailbox___Extension_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Mailbox Policy	CA_Event__UM_Mailbox___Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Missed Call Notification Enabled/Disabled	CA_Event__UM_Mailbox___Missed_Call_Notification_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Operator Number	CA_Event__UM_Mailbox___Operator_Number_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - PIN Reset	CA_Event__UM_Mailbox___PIN_Reset_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Play Voice Mail On Phone Enabled/Disabled	CA_Event__UM_Mailbox___Play_Voice_Mail_On_Phone_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Renamed	CA_Event__UM_Mailbox___Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - SMS Notification Option	CA_Event__UM_Mailbox___SMS_Notification_Option_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Subscriber Access Enabled/Disabled	CA_Event__UM_Mailbox___Subscriber_Access_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - TUI Access to Calendar Enabled/Disabled	CA_Event__UM_Mailbox___TUI_Access_to_Calendar_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - TUI Access to E-Mail Enabled/Disabled	CA_Event__UM_Mailbox___TUI_Access_to_E_Mail_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Mailbox - Voice Mail Access Without PIN Enabled/Disabled	CA_Event__UM_Mailbox___Voice_Mail_Access_Without_PIN_Enabled_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - Dial Plans	CA_Event__UM_Server___Dial_Plans_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - External Host FQDN	CA_Event__UM_Server___External_Host_FQDN_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - External Service FQDN	CA_Event__UM_Server___External_Service_FQDN_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - Grammar Generation Schedule	CA_Event__UM_Server___Grammar_Generation_Schedule_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - IRM Logging Enable/Disable	CA_Event__UM_Server___IRM_Logging_Enable_Disable_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - IRM Log Max Age	CA_Event__UM_Server___IRM_Log_Max_Age_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - IRM Log Max Directory Size	CA_Event__UM_Server___IRM_Log_Max_Directory_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - IRM Log Max File Size	CA_Event__UM_Server___IRM_Log_Max_File_Size_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - IRM Log Path	CA_Event__UM_Server___IRM_Log_Path_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - Max Calls Allowed	CA_Event__UM_Server___Max_Calls_Allowed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - SIP Access Service	CA_Event__UM_Server___SIP_Access_Service_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - SIP TCP Listen Port	CA_Event__UM_Server___SIP_TCP_Listen_Port_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - SIP TLS Listen Port	CA_Event__UM_Server___SIP_TLS_Listen_Port_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - Startup Mode	CA_Event__UM_Server___Startup_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UM Server - Status	CA_Event__UM_Server___Status_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Unified Messaging has been disabled for user mailbox	CA_Event__Unified_Messaging_has_been_disabled_for_user_mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Unified Messaging has been enabled for user mailbox	CA_Event__Unified_Messaging_has_been_enabled_for_user_mailbox_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Unified Messaging Pin for user mailbox has changed	CA_Event__Unified_Messaging_Pin_for_user_mailbox_has_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX-Enabled Changed for Group	CA_Event__UNIX_Enabled_Changed_for_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX-Enabled Changed for User	CA_Event__UNIX_Enabled_Changed_for_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX-Enabled Group Created	CA_Event__UNIX_Enabled_Group_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX-Enabled Group Deleted	CA_Event__UNIX_Enabled_Group_Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX-Enabled User Created	CA_Event__UNIX_Enabled_User_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX-Enabled User Deleted	CA_Event__UNIX_Enabled_User_Deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX GECOS Changed	CA_Event__UNIX_GECOS_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX Group ID Number Changed for Group	CA_Event__UNIX_Group_ID_Number_Changed_for_Group_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX Group ID Number Changed for User	CA_Event__UNIX_Group_ID_Number_Changed_for_User_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX Group Name Changed	CA_Event__UNIX_Group_Name_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX Home Directory Changed	CA_Event__UNIX_Home_Directory_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX Login Name Changed	CA_Event__UNIX_Login_Name_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX Login Shell Changed	CA_Event__UNIX_Login_Shell_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: UNIX User ID Number Changed	CA_Event__UNIX_User_ID_Number_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Unlicensed Virtual Machines	CA_Event__Unlicensed_Virtual_Machines_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Unlicensed Virtual Machines Found	CA_Event__Unlicensed_Virtual_Machines_Found_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Unprepare SQL	CA_Event__Unprepare_SQL_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Unsigned Non-Driver Installation Behavior policy changed	CA_Event__Unsigned_Non_Driver_Installation_Behavior_policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Updated Agent Being Restarted	CA_Event__Updated_Agent_Being_Restarted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Update DNS on all adapters setting changed	CA_Event__Update_DNS_on_all_adapters_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Update Options setting changed	CA_Event__Update_Options_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Upgrade Event	CA_Event__Upgrade_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User accountExpires changed	CA_Event__User_accountExpires_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Admin Approval Mode for the Built-in Administrator account	CA_Event__User_Account_Control__Admin_Approval_Mode_for_the_Built_in_Administrator_account_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop	CA_Event__User_Account_Control__Allow_UIAccess_applications_to_prompt_for_elevation_without_using_the_secure_desktop_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode	CA_Event__User_Account_Control__Behavior_of_the_elevation_prompt_for_administrators_in_Admin_Approval_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Behavior of the elevation prompt for standard users	CA_Event__User_Account_Control__Behavior_of_the_elevation_prompt_for_standard_users_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Detect application installations and prompt for elevation	CA_Event__User_Account_Control__Detect_application_installations_and_prompt_for_elevation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Only elevate executables that are signed and validated	CA_Event__User_Account_Control__Only_elevate_executables_that_are_signed_and_validated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Only elevate UIAccess applications that are installed in secure locations	CA_Event__User_Account_Control__Only_elevate_UIAccess_applications_that_are_installed_in_secure_locations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Run all administrators in Admin Approval Mode	CA_Event__User_Account_Control__Run_all_administrators_in_Admin_Approval_Mode_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Switch to the secure desktop when prompting for elevation	CA_Event__User_Account_Control__Switch_to_the_secure_desktop_when_prompting_for_elevation_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Control: Virtualize file and registry write failures to per-user locations	CA_Event__User_Account_Control__Virtualize_file_and_registry_write_failures_to_per_user_locations_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User account disabled	CA_Event__User_account_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User account enabled	CA_Event__User_account_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Is Sensitive And Cannot be Delegated option changed	CA_Event__User_Account_Is_Sensitive_And_Cannot_be_Delegated_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account Is Trusted For Delegation option changed	CA_Event__User_Account_Is_Trusted_For_Delegation_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User account locked	CA_Event__User_account_locked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User account re-enabled	CA_Event__User_account_re_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Account type changed	CA_Event__User_Account_type_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User account unlocked	CA_Event__User_account_unlocked_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Administrative Template setting changed	CA_Event__User_Administrative_Template_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Application Data Folder Redirection Options changed	CA_Event__User_Application_Data_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Application Data Folder Redirection Target Path changed	CA_Event__User_Application_Data_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 0	CA_Event__User_Configurable_0_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 1	CA_Event__User_Configurable_1_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 2	CA_Event__User_Configurable_2_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 3	CA_Event__User_Configurable_3_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 4	CA_Event__User_Configurable_4_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 5	CA_Event__User_Configurable_5_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 6	CA_Event__User_Configurable_6_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 7	CA_Event__User_Configurable_7_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 8	CA_Event__User_Configurable_8_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User-Configurable 9	CA_Event__User_Configurable_9_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Contacts Folder Redirection Options changed	CA_Event__User_Contacts_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Contacts Folder Redirection Target Path changed	CA_Event__User_Contacts_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Credential Roaming added	CA_Event__User_Credential_Roaming_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Credential Roaming changed	CA_Event__User_Credential_Roaming_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Credential Roaming options changed	CA_Event__User_Credential_Roaming_options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Credential Roaming removed	CA_Event__User_Credential_Roaming_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User delivery restrictions receiving size changed	CA_Event__User_delivery_restrictions_receiving_size_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User delivery restrictions sending size changed	CA_Event__User_delivery_restrictions_sending_size_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Desktop Folder Redirection Options changed	CA_Event__User_Desktop_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Desktop Folder Redirection Target Path changed	CA_Event__User_Desktop_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Dial-in Callback Options changed	CA_Event__User_Dial_in_Callback_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Dial-in Remote Access Permission changed	CA_Event__User_Dial_in_Remote_Access_Permission_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Dial-in Static IP Address changed	CA_Event__User_Dial_in_Static_IP_Address_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Dial-in Static Route added	CA_Event__User_Dial_in_Static_Route_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Dial-in Static Route removed	CA_Event__User_Dial_in_Static_Route_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Dial-in Verify Caller-ID changed	CA_Event__User_Dial_in_Verify_Caller_ID_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Downloads Folder Redirection Options changed	CA_Event__User_Downloads_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Downloads Folder Redirection Target Path changed	CA_Event__User_Downloads_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Do Not Require Kerberos Preauthentication option changed	CA_Event__User_Do_Not_Require_Kerberos_Preauthentication_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Error Message	CA_Event__User_Error_Message_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Favorites Folder Redirection Options changed	CA_Event__User_Favorites_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Favorites Folder Redirection Target Path changed	CA_Event__User_Favorites_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Group Policy Preference setting changed	CA_Event__User_Group_Policy_Preference_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Automatic Browser Configuration Auto-config Option changed	CA_Event__User_Internet_Explorer_Maintenance_Automatic_Browser_Configuration_Auto_config_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Automatic Browser Configuration Auto-config Time changed	CA_Event__User_Internet_Explorer_Maintenance_Automatic_Browser_Configuration_Auto_config_Time_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Automatic Browser Configuration Auto-config URL changed	CA_Event__User_Internet_Explorer_Maintenance_Automatic_Browser_Configuration_Auto_config_URL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Automatic Browser Configuration Auto-detect Option changed	CA_Event__User_Internet_Explorer_Maintenance_Automatic_Browser_Configuration_Auto_detect_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Automatic Browser Configuration Auto-proxy URL changed	CA_Event__User_Internet_Explorer_Maintenance_Automatic_Browser_Configuration_Auto_proxy_URL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Browser Title changed	CA_Event__User_Internet_Explorer_Maintenance_Browser_Title_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Connection Delete Existing Option changed	CA_Event__User_Internet_Explorer_Maintenance_Connection_Delete_Existing_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Connection Settings Import Option changed	CA_Event__User_Internet_Explorer_Maintenance_Connection_Settings_Import_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Content Ratings Option changed	CA_Event__User_Internet_Explorer_Maintenance_Content_Ratings_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Enable Trusted Publisher Lockdown Option changed	CA_Event__User_Internet_Explorer_Maintenance_Enable_Trusted_Publisher_Lockdown_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Important URLs Home Page URL changed	CA_Event__User_Internet_Explorer_Maintenance_Important_URLs_Home_Page_URL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Important URLs Online Support URL changed	CA_Event__User_Internet_Explorer_Maintenance_Important_URLs_Online_Support_URL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Important URLs Search Bar URL changed	CA_Event__User_Internet_Explorer_Maintenance_Important_URLs_Search_Bar_URL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Large Animated Logo changed	CA_Event__User_Internet_Explorer_Maintenance_Large_Animated_Logo_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Large Static Logo changed	CA_Event__User_Internet_Explorer_Maintenance_Large_Static_Logo_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Program Settings Option changed	CA_Event__User_Internet_Explorer_Maintenance_Program_Settings_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Proxy Settings Configuration FTP Proxy changed	CA_Event__User_Internet_Explorer_Maintenance_Proxy_Settings_Configuration_FTP_Proxy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Proxy Settings Configuration Gopher Proxy changed	CA_Event__User_Internet_Explorer_Maintenance_Proxy_Settings_Configuration_Gopher_Proxy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Proxy Settings Configuration Secure Proxy changed	CA_Event__User_Internet_Explorer_Maintenance_Proxy_Settings_Configuration_Secure_Proxy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Proxy Settings HTTP Proxy changed	CA_Event__User_Internet_Explorer_Maintenance_Proxy_Settings_HTTP_Proxy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Proxy Settings Proxy Exceptions changed	CA_Event__User_Internet_Explorer_Maintenance_Proxy_Settings_Proxy_Exceptions_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Proxy Settings Socks Proxy changed	CA_Event__User_Internet_Explorer_Maintenance_Proxy_Settings_Socks_Proxy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Security Zones and Privacy Customization Option changed	CA_Event__User_Internet_Explorer_Maintenance_Security_Zones_and_Privacy_Customization_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Small Animated Logo changed	CA_Event__User_Internet_Explorer_Maintenance_Small_Animated_Logo_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Small Static Logo changed	CA_Event__User_Internet_Explorer_Maintenance_Small_Static_Logo_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Toolbar Background Bitmap changed	CA_Event__User_Internet_Explorer_Maintenance_Toolbar_Background_Bitmap_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance Toolbar Buttons changed	CA_Event__User_Internet_Explorer_Maintenance_Toolbar_Buttons_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance URLs Browser Favorites List changed	CA_Event__User_Internet_Explorer_Maintenance_URLs_Browser_Favorites_List_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance URLs Browser Links List changed	CA_Event__User_Internet_Explorer_Maintenance_URLs_Browser_Links_List_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance URLs Favorites and Links Delete Existing Channels Option changed	CA_Event__User_Internet_Explorer_Maintenance_URLs_Favorites_and_Links_Delete_Existing_Channels_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance URLs Favorites and Links Delete Existing Favorites Option changed	CA_Event__User_Internet_Explorer_Maintenance_URLs_Favorites_and_Links_Delete_Existing_Favorites_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance URLs Favorites and Links Top Of List Option changed	CA_Event__User_Internet_Explorer_Maintenance_URLs_Favorites_and_Links_Top_Of_List_Option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Internet Explorer Maintenance User Agent String changed	CA_Event__User_Internet_Explorer_Maintenance_User_Agent_String_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Links Folder Redirection Options changed	CA_Event__User_Links_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Links Folder Redirection Target Path changed	CA_Event__User_Links_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Login Session Event	CA_Event__User_Login_Session_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User logonHours changed	CA_Event__User_logonHours_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Logout Session Event	CA_Event__User_Logout_Session_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User member-of added	CA_Event__User_member_of_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User member-of removed	CA_Event__User_member_of_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Music Folder Redirection Options changed	CA_Event__User_Music_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Music Folder Redirection Target Path changed	CA_Event__User_Music_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Must Change Password At Next Logon option changed	CA_Event__User_Must_Change_Password_At_Next_Logon_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User My Documents Folder My Pictures Preferences changed	CA_Event__User_My_Documents_Folder_My_Pictures_Preferences_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User My Documents Folder Redirection Options changed	CA_Event__User_My_Documents_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User My Documents Folder Redirection Target Path changed	CA_Event__User_My_Documents_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User object added	CA_Event__User_object_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User object moved	CA_Event__User_object_moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User object removed	CA_Event__User_object_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User password changed	CA_Event__User_password_changed_1_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Password Never Expires option changed	CA_Event__User_Password_Never_Expires_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Pictures Folder Redirection Options changed	CA_Event__User_Pictures_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Pictures Folder Redirection Target Path changed	CA_Event__User_Pictures_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Public Key Policies Autoenrollment Settings changed	CA_Event__User_Public_Key_Policies_Autoenrollment_Settings_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Public Key Policies Enterprise Trust List added	CA_Event__User_Public_Key_Policies_Enterprise_Trust_List_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Public Key Policies Enterprise Trust List changed	CA_Event__User_Public_Key_Policies_Enterprise_Trust_List_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Public Key Policies Enterprise Trust List removed	CA_Event__User_Public_Key_Policies_Enterprise_Trust_List_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Reset Count Changed	CA_Event__User_Reset_Count_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User samAccountName changed	CA_Event__User_samAccountName_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Saved Games Folder Redirection Options changed	CA_Event__User_Saved_Games_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Saved Games Folder Redirection Target Path changed	CA_Event__User_Saved_Games_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Searches Folder Redirection Options changed	CA_Event__User_Searches_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Searches Folder Redirection Target Path changed	CA_Event__User_Searches_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Smart Card Is Required For Interactive Logon option changed	CA_Event__User_Smart_Card_Is_Required_For_Interactive_Logon_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Installation Policy added	CA_Event__User_Software_Installation_Policy_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Installation Policy changed	CA_Event__User_Software_Installation_Policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Installation Policy removed	CA_Event__User_Software_Installation_Policy_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Hash Rule added	CA_Event__User_Software_Restriction_Basic_User_Hash_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Hash Rule changed	CA_Event__User_Software_Restriction_Basic_User_Hash_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Hash Rule removed	CA_Event__User_Software_Restriction_Basic_User_Hash_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Path Rule added	CA_Event__User_Software_Restriction_Basic_User_Path_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Path Rule changed	CA_Event__User_Software_Restriction_Basic_User_Path_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Path Rule removed	CA_Event__User_Software_Restriction_Basic_User_Path_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Zone Rule added	CA_Event__User_Software_Restriction_Basic_User_Zone_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Zone Rule changed	CA_Event__User_Software_Restriction_Basic_User_Zone_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Basic User Zone Rule removed	CA_Event__User_Software_Restriction_Basic_User_Zone_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Designated File Types changed	CA_Event__User_Software_Restriction_Designated_File_Types_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Certificate Rule added	CA_Event__User_Software_Restriction_Disallowed_Certificate_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Certificate Rule changed	CA_Event__User_Software_Restriction_Disallowed_Certificate_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Certificate Rule removed	CA_Event__User_Software_Restriction_Disallowed_Certificate_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Hash Rule added	CA_Event__User_Software_Restriction_Disallowed_Hash_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Hash Rule changed	CA_Event__User_Software_Restriction_Disallowed_Hash_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Hash Rule removed	CA_Event__User_Software_Restriction_Disallowed_Hash_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Path Rule added	CA_Event__User_Software_Restriction_Disallowed_Path_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Path Rule changed	CA_Event__User_Software_Restriction_Disallowed_Path_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Path Rule removed	CA_Event__User_Software_Restriction_Disallowed_Path_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Zone Rule added	CA_Event__User_Software_Restriction_Disallowed_Zone_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Zone Rule changed	CA_Event__User_Software_Restriction_Disallowed_Zone_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Disallowed Zone Rule removed	CA_Event__User_Software_Restriction_Disallowed_Zone_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Enforcement Files changed	CA_Event__User_Software_Restriction_Enforcement_Files_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Enforcement Users changed	CA_Event__User_Software_Restriction_Enforcement_Users_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Policies Default Security Level changed	CA_Event__User_Software_Restriction_Policies_Default_Security_Level_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Trusted Publishers changed	CA_Event__User_Software_Restriction_Trusted_Publishers_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Certificate Rule added	CA_Event__User_Software_Restriction_Unrestricted_Certificate_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Certificate Rule changed	CA_Event__User_Software_Restriction_Unrestricted_Certificate_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Certificate Rule removed	CA_Event__User_Software_Restriction_Unrestricted_Certificate_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Hash Rule added	CA_Event__User_Software_Restriction_Unrestricted_Hash_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Hash Rule changed	CA_Event__User_Software_Restriction_Unrestricted_Hash_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Hash Rule removed	CA_Event__User_Software_Restriction_Unrestricted_Hash_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Path Rule added	CA_Event__User_Software_Restriction_Unrestricted_Path_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Path Rule changed	CA_Event__User_Software_Restriction_Unrestricted_Path_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Path Rule removed	CA_Event__User_Software_Restriction_Unrestricted_Path_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Zone Rule added	CA_Event__User_Software_Restriction_Unrestricted_Zone_Rule_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Zone Rule changed	CA_Event__User_Software_Restriction_Unrestricted_Zone_Rule_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Software Restriction Unrestricted Zone Rule removed	CA_Event__User_Software_Restriction_Unrestricted_Zone_Rule_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Start Menu Folder Redirection Options changed	CA_Event__User_Start_Menu_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Start Menu Folder Redirection Target Path changed	CA_Event__User_Start_Menu_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Store Password Using Reversible Encryption option changed	CA_Event__User_Store_Password_Using_Reversible_Encryption_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Upgrade Event	CA_Event__User_Upgrade_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User userPrincipalName changed	CA_Event__User_userPrincipalName_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User userWorkstations added	CA_Event__User_userWorkstations_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User userWorkstations removed	CA_Event__User_userWorkstations_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Use DES Encryption Types For This Account option changed	CA_Event__User_Use_DES_Encryption_Types_For_This_Account_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Videos Folder Redirection Options changed	CA_Event__User_Videos_Folder_Redirection_Options_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Videos Folder Redirection Target Path changed	CA_Event__User_Videos_Folder_Redirection_Target_Path_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: User Violation Count Changed	CA_Event__User_Violation_Count_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Use Connection Suffix in DNS Registration option changed	CA_Event__Use_Connection_Suffix_in_DNS_Registration_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Use DNS MX Records To Route Mail Option Changed	CA_Event__Use_DNS_MX_Records_To_Route_Mail_Option_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Use LMHOSTS option changed	CA_Event__Use_LMHOSTS_option_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Use Mailbox Database Defaults changed for user	CA_Event__Use_Mailbox_Database_Defaults_changed_for_user_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Use of dynamic DNS changed	CA_Event__Use_of_dynamic_DNS_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Use primary and connection specific suffixes flag changed	CA_Event__Use_primary_and_connection_specific_suffixes_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vc Agent Uninstalled	CA_Event__Vc_Agent_Uninstalled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vc Agent Uninstall Failed	CA_Event__Vc_Agent_Uninstall_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vc Agent Upgraded	CA_Event__Vc_Agent_Upgraded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vc Agent Upgrade Failed	CA_Event__Vc_Agent_Upgrade_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vim Account Password Changed	CA_Event__Vim_Account_Password_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Virtual Directory Added To Offline Address Book Distribution	CA_Event__Virtual_Directory_Added_To_Offline_Address_Book_Distribution_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Virtual Directory Removed From Offline Address Book Distribution	CA_Event__Virtual_Directory_Removed_From_Offline_Address_Book_Distribution_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMFSDatastore Created	CA_Event__VMFSDatastore_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMFSDatastore Expanded	CA_Event__VMFSDatastore_Expanded_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMFSDatastore Extended	CA_Event__VMFSDatastore_Extended_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMotion License Expired	CA_Event__VMotion_License_Expired_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMware auditing template added	CA_Event__VMware_auditing_template_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMware auditing template disabled	CA_Event__VMware_auditing_template_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMware auditing template enabled	CA_Event__VMware_auditing_template_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: VMware auditing template removed	CA_Event__VMware_auditing_template_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Acquired Mks Ticket	CA_Event__Vm_Acquired_Mks_Ticket_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Acquired Ticket	CA_Event__Vm_Acquired_Ticket_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Auto Rename Event	CA_Event__Vm_Auto_Rename_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Being Cloned	CA_Event__Vm_Being_Cloned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Being Cloned No Folder	CA_Event__Vm_Being_Cloned_No_Folder_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Being Created	CA_Event__Vm_Being_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Being Deployed	CA_Event__Vm_Being_Deployed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Being Hot Migrated	CA_Event__Vm_Being_Hot_Migrated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Being Migrated	CA_Event__Vm_Being_Migrated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Being Relocated	CA_Event__Vm_Being_Relocated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Cloned	CA_Event__Vm_Cloned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Clone Event	CA_Event__Vm_Clone_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Clone Failed	CA_Event__Vm_Clone_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Config Missing Event	CA_Event__Vm_Config_Missing_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Connected	CA_Event__Vm_Connected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Created	CA_Event__Vm_Created_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Das Being Reset Event	CA_Event__Vm_Das_Being_Reset_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Das Being Reset With Screenshot Event	CA_Event__Vm_Das_Being_Reset_With_Screenshot_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Das Reset Failed	CA_Event__Vm_Das_Reset_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Das Update Error Event	CA_Event__Vm_Das_Update_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Das Update Ok Event	CA_Event__Vm_Das_Update_Ok_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Date Rolled Back	CA_Event__Vm_Date_Rolled_Back_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Deployed	CA_Event__Vm_Deployed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Deploy Failed	CA_Event__Vm_Deploy_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Disconnected	CA_Event__Vm_Disconnected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Discovered	CA_Event__Vm_Discovered_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Disk Failed	CA_Event__Vm_Disk_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Emigrating Event	CA_Event__Vm_Emigrating_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm End Recording Event	CA_Event__Vm_End_Recording_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm End Replaying Event	CA_Event__Vm_End_Replaying_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Event	CA_Event__Vm_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed Migrate	CA_Event__Vm_Failed_Migrate_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed Relayout	CA_Event__Vm_Failed_Relayout_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed Relayout On Vmfs2 Datastore	CA_Event__Vm_Failed_Relayout_On_Vmfs2_Datastore_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed Starting Secondary	CA_Event__Vm_Failed_Starting_Secondary_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed To Power Off	CA_Event__Vm_Failed_To_Power_Off_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed To Power On	CA_Event__Vm_Failed_To_Power_On_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed To Reboot Guest	CA_Event__Vm_Failed_To_Reboot_Guest_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed To Reset	CA_Event__Vm_Failed_To_Reset_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed To Shutdown Guest	CA_Event__Vm_Failed_To_Shutdown_Guest_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed To Standby Guest	CA_Event__Vm_Failed_To_Standby_Guest_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed To Suspend	CA_Event__Vm_Failed_To_Suspend_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failed Updating Secondary Config	CA_Event__Vm_Failed_Updating_Secondary_Config_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Failover Failed	CA_Event__Vm_Failover_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Fault Tolerance State Changed	CA_Event__Vm_Fault_Tolerance_State_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Fault Tolerance Turned Off	CA_Event__Vm_Fault_Tolerance_Turned_Off_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Fault Tolerance Vm Terminated	CA_Event__Vm_Fault_Tolerance_Vm_Terminated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Guest Reboot Event	CA_Event__Vm_Guest_Reboot_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Guest Shutdown Event	CA_Event__Vm_Guest_Shutdown_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Guest Standby Event	CA_Event__Vm_Guest_Standby_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Health Monitoring State Changed	CA_Event__Vm_Health_Monitoring_State_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Instance Uuid Assigned	CA_Event__Vm_Instance_Uuid_Assigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Instance Uuid Changed	CA_Event__Vm_Instance_Uuid_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Instance Uuid Conflict Event	CA_Event__Vm_Instance_Uuid_Conflict_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Mac Assigned	CA_Event__Vm_Mac_Assigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Mac Changed	CA_Event__Vm_Mac_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Mac Conflict Event	CA_Event__Vm_Mac_Conflict_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Max FTRestart Count Reached	CA_Event__Vm_Max_FTRestart_Count_Reached_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Max Restart Count Reached	CA_Event__Vm_Max_Restart_Count_Reached_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Message Error Event	CA_Event__Vm_Message_Error_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Message Event	CA_Event__Vm_Message_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Message Warning Event	CA_Event__Vm_Message_Warning_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Migrated	CA_Event__Vm_Migrated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm No Compatible Host For Secondary Event	CA_Event__Vm_No_Compatible_Host_For_Secondary_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm No Network Access Event	CA_Event__Vm_No_Network_Access_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Orphaned	CA_Event__Vm_Orphaned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Powered Off	CA_Event__Vm_Powered_Off_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Powered On	CA_Event__Vm_Powered_On_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Powering On With Customized DVPort	CA_Event__Vm_Powering_On_With_Customized_DVPort_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Power Off On Isolation Event	CA_Event__Vm_Power_Off_On_Isolation_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Primary Failover Event	CA_Event__Vm_Primary_Failover_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Reconfigured	CA_Event__Vm_Reconfigured_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Registered	CA_Event__Vm_Registered_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Relayout Successful Event	CA_Event__Vm_Relayout_Successful_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Relayout Up To Date Event	CA_Event__Vm_Relayout_Up_To_Date_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Reload From Path Event	CA_Event__Vm_Reload_From_Path_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Reload From Path Failed	CA_Event__Vm_Reload_From_Path_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Relocated	CA_Event__Vm_Relocated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Relocate Failed	CA_Event__Vm_Relocate_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Relocate Spec Event	CA_Event__Vm_Relocate_Spec_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Remote Console Connected	CA_Event__Vm_Remote_Console_Connected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Remote Console Disconnected	CA_Event__Vm_Remote_Console_Disconnected_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Removed	CA_Event__Vm_Removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Renamed	CA_Event__Vm_Renamed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Resetting Event	CA_Event__Vm_Resetting_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Resource Pool Moved	CA_Event__Vm_Resource_Pool_Moved_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Resource Reallocated	CA_Event__Vm_Resource_Reallocated_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Restarted On Alternate Host	CA_Event__Vm_Restarted_On_Alternate_Host_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Resuming Event	CA_Event__Vm_Resuming_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Secondary Added	CA_Event__Vm_Secondary_Added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Secondary Disabled	CA_Event__Vm_Secondary_Disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Secondary Disabled By System	CA_Event__Vm_Secondary_Disabled_By_System_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Secondary Enabled	CA_Event__Vm_Secondary_Enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Secondary Started	CA_Event__Vm_Secondary_Started_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Shutdown On Isolation Event	CA_Event__Vm_Shutdown_On_Isolation_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Starting Event	CA_Event__Vm_Starting_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Starting Secondary Event	CA_Event__Vm_Starting_Secondary_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Start Recording Event	CA_Event__Vm_Start_Recording_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Start Replaying Event	CA_Event__Vm_Start_Replaying_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Static Mac Conflict Event	CA_Event__Vm_Static_Mac_Conflict_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Stopping Event	CA_Event__Vm_Stopping_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Suspended	CA_Event__Vm_Suspended_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Suspending Event	CA_Event__Vm_Suspending_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Timedout Starting Secondary Event	CA_Event__Vm_Timedout_Starting_Secondary_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Unsupported Starting	CA_Event__Vm_Unsupported_Starting_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Upgrade Complete Event	CA_Event__Vm_Upgrade_Complete_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Upgrade Failed	CA_Event__Vm_Upgrade_Failed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Upgrading Event	CA_Event__Vm_Upgrading_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Uuid Assigned	CA_Event__Vm_Uuid_Assigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Uuid Changed	CA_Event__Vm_Uuid_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Uuid Conflict Event	CA_Event__Vm_Uuid_Conflict_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Wwn Assigned	CA_Event__Vm_Wwn_Assigned_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Wwn Changed	CA_Event__Vm_Wwn_Changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Vm Wwn Conflict Event	CA_Event__Vm_Wwn_Conflict_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Voice Message Text Changed In UM Mailbox Policy	CA_Event__Voice_Message_Text_Changed_In_UM_Mailbox_Policy_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Warning Message Interval changed for Mailbox database	CA_Event__Warning_Message_Interval_changed_for_Mailbox_database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Warning Message Interval changed in Mailbox store	CA_Event__Warning_Message_Interval_changed_in_Mailbox_store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Warning Message Interval Changed in Public Folders Database	CA_Event__Warning_Message_Interval_Changed_in_Public_Folders_Database_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Warning Message Interval Changed in Public Store	CA_Event__Warning_Message_Interval_Changed_in_Public_Store_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Warning Upgrade Event	CA_Event__Warning_Upgrade_Event_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Web Page changed on user object	CA_Event__Web_Page_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: When Session Limit is Reached changed for user object	CA_Event__When_Session_Limit_is_Reached_changed_for_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: WINS forwarding flag disabled	CA_Event__WINS_forwarding_flag_disabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: WINS forwarding flag enabled	CA_Event__WINS_forwarding_flag_enabled_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: WINS forwarding host list changed	CA_Event__WINS_forwarding_host_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Wireless Network Policy added	CA_Event__Wireless_Network_Policy_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Wireless Network Policy changed	CA_Event__Wireless_Network_Policy_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Wireless Network Policy removed	CA_Event__Wireless_Network_Policy_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: WriteAuthorityNS setting changed	CA_Event__WriteAuthorityNS_setting_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: XQuery Static Type	CA_Event__XQuery_Static_Type_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zip/Postal Code changed on user object	CA_Event__Zip_Postal_Code_changed_on_user_object_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone added	CA_Event__Zone_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone allow dynamic updates flag changed	CA_Event__Zone_allow_dynamic_updates_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone default TTL changed	CA_Event__Zone_default_TTL_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone delegation added	CA_Event__Zone_delegation_added_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone delegation removed	CA_Event__Zone_delegation_removed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone deleted	CA_Event__Zone_deleted_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone load mode changed	CA_Event__Zone_load_mode_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone refresh interval changed	CA_Event__Zone_refresh_interval_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone replication scope changed	CA_Event__Zone_replication_scope_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone scavenging flag changed	CA_Event__Zone_scavenging_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone storage changed	CA_Event__Zone_storage_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone transfer flag changed	CA_Event__Zone_transfer_flag_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone transfer host list changed	CA_Event__Zone_transfer_host_list_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: Zone type changed	CA_Event__Zone_type_changed_1_Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	EventCollection	True	True
	CA Event: A cloud synchronization process has started	Quest.CA.Event.A.cloud.synchronization.process.has.started.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A cloud synchronization process has stopped	Quest.CA.Event.A.cloud.synchronization.process.has.stopped.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user accessed a cloud storage site	Quest.CA.Event.A.user.accessed.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user accessed a web site	Quest.CA.Event.A.user.accessed.a.web.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user added a file to a cloud synchronization root	Quest.CA.Event.A.user.added.a.file.to.a.cloud.synchronization.root.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user added a folder to a cloud synchronization root	Quest.CA.Event.A.user.added.a.folder.to.a.cloud.synchronization.root.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user deleted a file from a cloud synchronization root	Quest.CA.Event.A.user.deleted.a.file.from.a.cloud.synchronization.root.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user deleted a folder from a cloud synchronization root	Quest.CA.Event.A.user.deleted.a.folder.from.a.cloud.synchronization.root.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user download a file from a cloud storage site	Quest.CA.Event.A.user.download.a.file.from.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user downloaded a file from a cloud storage service	Quest.CA.Event.A.user.downloaded.a.file.from.a.cloud.storage.service.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user renamed a file within a cloud synchronization root	Quest.CA.Event.A.user.renamed.a.file.within.a.cloud.synchronization.root.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user renamed a folder within a cloud synchronization root	Quest.CA.Event.A.user.renamed.a.folder.within.a.cloud.synchronization.root.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session took place	Quest.CA.Event.A.user.session.took.place.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was ended by the screensaver turning on	Quest.CA.Event.A.user.session.was.ended.by.the.screensaver.turning.on.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was ended by user locking the computer	Quest.CA.Event.A.user.session.was.ended.by.user.locking.the.computer.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was ended by user logging off	Quest.CA.Event.A.user.session.was.ended.by.user.logging.off.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was ended by user stopping a terminal services connection	Quest.CA.Event.A.user.session.was.ended.by.user.stopping.a.terminal.services.connection.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was ended due to computer shutdown	Quest.CA.Event.A.user.session.was.ended.due.to.computer.shutdown.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was ended due to user switch	Quest.CA.Event.A.user.session.was.ended.due.to.user.switch.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was started before the start of the user session monitoring service	Quest.CA.Event.A.user.session.was.started.before.the.start.of.the.user.session.monitoring.service.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was started by user exiting screensaver mode	Quest.CA.Event.A.user.session.was.started.by.user.exiting.screensaver.mode.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was started by user making a terminal services connection	Quest.CA.Event.A.user.session.was.started.by.user.making.a.terminal.services.connection.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was started by user unlocking the computer	Quest.CA.Event.A.user.session.was.started.by.user.unlocking.the.computer.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was started due to user switch	Quest.CA.Event.A.user.session.was.started.due.to.user.switch.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user session was started	Quest.CA.Event.A.user.session.was.started.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user uploaded a file to a cloud storage site	Quest.CA.Event.A.user.uploaded.a.file.to.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user uploaded an encrypted file to a cloud storage service	Quest.CA.Event.A.user.uploaded.an.encrypted.file.to.a.cloud.storage.service.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user uploaded an unencrypted file to a cloud storage service	Quest.CA.Event.A.user.uploaded.an.unencrypted.file.to.a.cloud.storage.service.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user was blocked from accessing a cloud storage site	Quest.CA.Event.A.user.was.blocked.from.accessing.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user was blocked from accessing a web site	Quest.CA.Event.A.user.was.blocked.from.accessing.a.web.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user was blocked from downloading a file from a cloud storage site	Quest.CA.Event.A.user.was.blocked.from.downloading.a.file.from.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: A user was blocked from uploading a file to a cloud storage site	Quest.CA.Event.A.user.was.blocked.from.uploading.a.file.to.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Autodiscover command executed	Quest.CA.Event.ActiveSync.Autodiscover.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Create Collection command executed	Quest.CA.Event.ActiveSync.Create.Collection.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Delete Collection command executed	Quest.CA.Event.ActiveSync.Delete.Collection.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Folder Create command executed	Quest.CA.Event.ActiveSync.Folder.Create.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Folder Delete command executed	Quest.CA.Event.ActiveSync.Folder.Delete.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Folder Sync command executed	Quest.CA.Event.ActiveSync.Folder.Sync.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Folder Sync (initial) command executed	Quest.CA.Event.ActiveSync.Folder.Sync.initial.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Folder Update command executed	Quest.CA.Event.ActiveSync.Folder.Update.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Get Attachment command executed	Quest.CA.Event.ActiveSync.Get.Attachment.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Get Hierarchy command executed	Quest.CA.Event.ActiveSync.Get.Hierarchy.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Get Item Estimate command executed	Quest.CA.Event.ActiveSync.Get.Item.Estimate.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Item Operations command executed	Quest.CA.Event.ActiveSync.Item.Operations.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Meeting Response command executed	Quest.CA.Event.ActiveSync.Meeting.Response.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Move Collection command executed	Quest.CA.Event.ActiveSync.Move.Collection.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Move Items command executed	Quest.CA.Event.ActiveSync.Move.Items.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Ping command executed	Quest.CA.Event.ActiveSync.Ping.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Provision command executed	Quest.CA.Event.ActiveSync.Provision.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Remote Wipe failed	Quest.CA.Event.ActiveSync.Remote.Wipe.failed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Remote Wipe requested	Quest.CA.Event.ActiveSync.Remote.Wipe.requested.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Remote Wipe successful	Quest.CA.Event.ActiveSync.Remote.Wipe.successful.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Resolve Recipients command executed	Quest.CA.Event.ActiveSync.Resolve.Recipients.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Search command executed	Quest.CA.Event.ActiveSync.Search.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Send Mail command executed	Quest.CA.Event.ActiveSync.Send.Mail.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Settings command executed	Quest.CA.Event.ActiveSync.Settings.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Smart Forward command executed	Quest.CA.Event.ActiveSync.Smart.Forward.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Smart Reply command executed	Quest.CA.Event.ActiveSync.Smart.Reply.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Sync command executed	Quest.CA.Event.ActiveSync.Sync.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Sync (initial) command executed	Quest.CA.Event.ActiveSync.Sync.initial.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: ActiveSync Validate Certificate command executed	Quest.CA.Event.ActiveSync.Validate.Certificate.command.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent added to Exchange online auditing template	Quest.CA.Event.Agent.added.to.Exchange.online.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent configuration SonicWALL AppFlow port changed	Quest.CA.Event.Agent.configuration.SonicWALL.AppFlow.port.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent configuration SonicWALL data cache interval changed	Quest.CA.Event.Agent.configuration.SonicWALL.data.cache.interval.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent configuration SonicWALL processing idle time changed	Quest.CA.Event.Agent.configuration.SonicWALL.processing.idle.time.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent configuration SonicWALL processing interval changed	Quest.CA.Event.Agent.configuration.SonicWALL.processing.interval.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent configuration SonicWALL purge idle time changed	Quest.CA.Event.Agent.configuration.SonicWALL.purge.idle.time.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent configuration SonicWALL purge interval changed	Quest.CA.Event.Agent.configuration.SonicWALL.purge.interval.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent is unable to connect to the Dell Data Protection service	Quest.CA.Event.Agent.is.unable.to.connect.to.the.Dell.Data.Protection.service.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent removed from Exchange online auditing template	Quest.CA.Event.Agent.removed.from.Exchange.online.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Agent successfully connected to the Dell Data Protection service	Quest.CA.Event.Agent.successfully.connected.to.the.Dell.Data.Protection.service.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An incorrectly finished user session was found	Quest.CA.Event.An.incorrectly.finished.user.session.was.found.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user accessed a cloud storage site	Quest.CA.Event.An.unknown.user.accessed.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user accessed a web site	Quest.CA.Event.An.unknown.user.accessed.a.web.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user download a file from a cloud storage site	Quest.CA.Event.An.unknown.user.download.a.file.from.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user uploaded a file to a cloud storage site	Quest.CA.Event.An.unknown.user.uploaded.a.file.to.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user was blocked from accessing a cloud storage site	Quest.CA.Event.An.unknown.user.was.blocked.from.accessing.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user was blocked from accessing a web site	Quest.CA.Event.An.unknown.user.was.blocked.from.accessing.a.web.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user was blocked from downloading a file from a cloud storage site	Quest.CA.Event.An.unknown.user.was.blocked.from.downloading.a.file.from.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: An unknown user was blocked from uploading a file to a cloud storage site	Quest.CA.Event.An.unknown.user.was.blocked.from.uploading.a.file.to.a.cloud.storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Application Event Log Cleared	Quest.CA.Event.Application.Event.Log.Cleared.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Application event log rolled over	Quest.CA.Event.Application.event.log.rolled.over.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Auditing disabled for SonicWALL Cloud Storage site	Quest.CA.Event.Auditing.disabled.for.SonicWALL.Cloud.Storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Auditing disabled for SonicWALL Web path	Quest.CA.Event.Auditing.disabled.for.SonicWALL.Web.path.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Auditing enabled for SonicWALL Cloud Storage site	Quest.CA.Event.Auditing.enabled.for.SonicWALL.Cloud.Storage.site.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Auditing enabled for SonicWALL Web path	Quest.CA.Event.Auditing.enabled.for.SonicWALL.Web.path.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Added	Quest.CA.Event.Database.Availability.Group.Added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Alternate Witness Directory Changed	Quest.CA.Event.Database.Availability.Group.Alternate.Witness.Directory.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Alternate Witness Server Changed	Quest.CA.Event.Database.Availability.Group.Alternate.Witness.Server.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag All Servers Installed Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.All.Servers.Installed.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Auto Reseed Enabled Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Auto.Reseed.Enabled.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Database Copies Per Database Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Database.Copies.Per.Database.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Database Copies Per Volume Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Database.Copies.Per.Volume.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Databases Root Folder Path Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Databases.Root.Folder.Path.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Disk Reclaimer Enabled Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Disk.Reclaimer.Enabled.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Total Number Of Databases Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Total.Number.Of.Databases.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Total Number Of Servers Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Total.Number.Of.Servers.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Auto Dag Volumes Root Folder Path Changed	Quest.CA.Event.Database.Availability.Group.Auto.Dag.Volumes.Root.Folder.Path.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Dag Configuration Changed	Quest.CA.Event.Database.Availability.Group.Dag.Configuration.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Database Availability Group Configuration Changed	Quest.CA.Event.Database.Availability.Group.Database.Availability.Group.Configuration.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Database Availability Group IP Addresses Changed	Quest.CA.Event.Database.Availability.Group.Database.Availability.Group.IP.Addresses.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Datacenter Activation Mode Changed	Quest.CA.Event.Database.Availability.Group.Datacenter.Activation.Mode.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Manual Dag Network Configuration Changed	Quest.CA.Event.Database.Availability.Group.Manual.Dag.Network.Configuration.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group Network - Added	Quest.CA.Event.Database.Availability.Group.Network.Added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Network Compression Changed	Quest.CA.Event.Database.Availability.Group.Network.Compression.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group Network - Description Changed	Quest.CA.Event.Database.Availability.Group.Network.Description.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Network Encryption Changed	Quest.CA.Event.Database.Availability.Group.Network.Encryption.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group Network - IgnoreNetwork Changed	Quest.CA.Event.Database.Availability.Group.Network.IgnoreNetwork.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group Network - Name Changed	Quest.CA.Event.Database.Availability.Group.Network.Name.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group Network - Removed	Quest.CA.Event.Database.Availability.Group.Network.Removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group Network - Replication Enabled Changed	Quest.CA.Event.Database.Availability.Group.Network.Replication.Enabled.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group Network - Subnets Changed	Quest.CA.Event.Database.Availability.Group.Network.Subnets.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Removed	Quest.CA.Event.Database.Availability.Group.Removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Replay Lag Manager Enabled Changed	Quest.CA.Event.Database.Availability.Group.Replay.Lag.Manager.Enabled.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Replication Port Changed	Quest.CA.Event.Database.Availability.Group.Replication.Port.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Restored	Quest.CA.Event.Database.Availability.Group.Restored.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Server Added	Quest.CA.Event.Database.Availability.Group.Server.Added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Server Removed	Quest.CA.Event.Database.Availability.Group.Server.Removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Started	Quest.CA.Event.Database.Availability.Group.Started.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Stopped	Quest.CA.Event.Database.Availability.Group.Stopped.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Witness Directory Changed	Quest.CA.Event.Database.Availability.Group.Witness.Directory.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Database Availability Group - Witness Server Changed	Quest.CA.Event.Database.Availability.Group.Witness.Server.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Distribution List - Email Address Policy Enabled changed	Quest.CA.Event.Distribution.List.Email.Address.Policy.Enabled.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange Online administrative cmdlet executed	Quest.CA.Event.Exchange.Online.administrative.cmdlet.executed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online auditing template added	Quest.CA.Event.Exchange.online.auditing.template.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online auditing template disabled	Quest.CA.Event.Exchange.online.auditing.template.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online auditing template enabled	Quest.CA.Event.Exchange.online.auditing.template.enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online auditing template removed	Quest.CA.Event.Exchange.online.auditing.template.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online mailbox added to monitoring	Quest.CA.Event.Exchange.online.mailbox.added.to.monitoring.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online mailbox disabled	Quest.CA.Event.Exchange.online.mailbox.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online mailbox enabled	Quest.CA.Event.Exchange.online.mailbox.enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Exchange online mailbox removed from monitoring	Quest.CA.Event.Exchange.online.mailbox.removed.from.monitoring.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Folder opened in online mailbox by non-owner	Quest.CA.Event.Folder.opened.in.online.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Folder opened in online shared mailbox by non-owner	Quest.CA.Event.Folder.opened.in.online.shared.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Host added to VMware auditing template	Quest.CA.Event.Host.added.to.VMware.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Host removed from VMware auditing template	Quest.CA.Event.Host.removed.from.VMware.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: Connection point created	Quest.CA.Event.Lync.Connection.point.created.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: Connection point deleted	Quest.CA.Event.Lync.Connection.point.deleted.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: Topology - Back end server changed	Quest.CA.Event.Lync.Topology.Back.end.server.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: User enabled attribute changed	Quest.CA.Event.Lync.User.enabled.attribute.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: User enabled options changed	Quest.CA.Event.Lync.User.enabled.options.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: User line server changed	Quest.CA.Event.Lync.User.line.server.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: User policy changed	Quest.CA.Event.Lync.User.policy.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: User primary address changed	Quest.CA.Event.Lync.User.primary.address.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Lync: User SIP or Phone URI changed	Quest.CA.Event.Lync.User.SIP.or.Phone.URI.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Accept Messages Only From list changed	Quest.CA.Event.Mailbox.Accept.Messages.Only.From.list.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Added	Quest.CA.Event.Mailbox.Added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Alias	Quest.CA.Event.Mailbox.Alias.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Anti-Spam Bypass	Quest.CA.Event.Mailbox.Anti.Spam.Bypass.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Apply Mandatory Properties	Quest.CA.Event.Mailbox.Apply.Mandatory.Properties.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Arbitration Mailbox	Quest.CA.Event.Mailbox.Arbitration.Mailbox.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Archive Database	Quest.CA.Event.Mailbox.Archive.Database.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Archive Domain	Quest.CA.Event.Mailbox.Archive.Domain.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Archive Name	Quest.CA.Event.Mailbox.Archive.Name.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Archive Quota	Quest.CA.Event.Mailbox.Archive.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Archive Warning Quota	Quest.CA.Event.Mailbox.Archive.Warning.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Audit Admin	Quest.CA.Event.Mailbox.Audit.Admin.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Audit Delegate	Quest.CA.Event.Mailbox.Audit.Delegate.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Audit Enabled	Quest.CA.Event.Mailbox.Audit.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Audit Log Age Limit	Quest.CA.Event.Mailbox.Audit.Log.Age.Limit.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Audit Owner	Quest.CA.Event.Mailbox.Audit.Owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Bypass Moderation from Senders or Members	Quest.CA.Event.Mailbox.Bypass.Moderation.from.Senders.or.Members.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Calendar Logging Quota	Quest.CA.Event.Mailbox.Calendar.Logging.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Calendar Repair Disabled	Quest.CA.Event.Mailbox.Calendar.Repair.Disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Calendar Version Store Disabled	Quest.CA.Event.Mailbox.Calendar.Version.Store.Disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Client Extensions	Quest.CA.Event.Mailbox.Client.Extensions.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Create DTMF Map	Quest.CA.Event.Mailbox.Create.DTMF.Map.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 1 changed	Quest.CA.Event.Mailbox.Custom.Attribute.1.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 10 changed	Quest.CA.Event.Mailbox.Custom.Attribute.10.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 11 changed	Quest.CA.Event.Mailbox.Custom.Attribute.11.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 12 changed	Quest.CA.Event.Mailbox.Custom.Attribute.12.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 13 changed	Quest.CA.Event.Mailbox.Custom.Attribute.13.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 14 changed	Quest.CA.Event.Mailbox.Custom.Attribute.14.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 15 changed	Quest.CA.Event.Mailbox.Custom.Attribute.15.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 2 changed	Quest.CA.Event.Mailbox.Custom.Attribute.2.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 3 changed	Quest.CA.Event.Mailbox.Custom.Attribute.3.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 4 changed	Quest.CA.Event.Mailbox.Custom.Attribute.4.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 5 changed	Quest.CA.Event.Mailbox.Custom.Attribute.5.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 6 changed	Quest.CA.Event.Mailbox.Custom.Attribute.6.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 7 changed	Quest.CA.Event.Mailbox.Custom.Attribute.7.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 8 changed	Quest.CA.Event.Mailbox.Custom.Attribute.8.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Custom Attribute 9 changed	Quest.CA.Event.Mailbox.Custom.Attribute.9.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Activation Preference Changed	Quest.CA.Event.Mailbox.Database.Copy.Activation.Preference.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Added	Quest.CA.Event.Mailbox.Database.Copy.Added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Database Copy Auto Activation Policy Changed	Quest.CA.Event.Mailbox.Database.Copy.Database.Copy.Auto.Activation.Policy.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Removed	Quest.CA.Event.Mailbox.Database.Copy.Removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Replay Lag Time Changed	Quest.CA.Event.Mailbox.Database.Copy.Replay.Lag.Time.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Resumed	Quest.CA.Event.Mailbox.Database.Copy.Resumed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Suspended	Quest.CA.Event.Mailbox.Database.Copy.Suspended.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Truncation Lag Time Changed	Quest.CA.Event.Mailbox.Database.Copy.Truncation.Lag.Time.Changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox Database Copy - Updated	Quest.CA.Event.Mailbox.Database.Copy.Updated.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Database	Quest.CA.Event.Mailbox.Database.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Default Public Folder Mailbox	Quest.CA.Event.Mailbox.Default.Public.Folder.Mailbox.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Deliver to Mailbox and Forward	Quest.CA.Event.Mailbox.Deliver.to.Mailbox.and.Forward.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Disable Room Mailbox Account	Quest.CA.Event.Mailbox.Disable.Room.Mailbox.Account.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Disabled	Quest.CA.Event.Mailbox.Disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Display Name	Quest.CA.Event.Mailbox.Display.Name.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Downgrade High Priority Messages Enabled	Quest.CA.Event.Mailbox.Downgrade.High.Priority.Messages.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Email Address Policy Enabled changed	Quest.CA.Event.Mailbox.Email.Address.Policy.Enabled.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Enable Room Mailbox Account	Quest.CA.Event.Mailbox.Enable.Room.Mailbox.Account.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Enabled	Quest.CA.Event.Mailbox.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - End Date For Retention Hold	Quest.CA.Event.Mailbox.End.Date.For.Retention.Hold.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Extension Custom Attribute 1	Quest.CA.Event.Mailbox.Extension.Custom.Attribute.1.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Extension Custom Attribute 2	Quest.CA.Event.Mailbox.Extension.Custom.Attribute.2.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Extension Custom Attribute 3	Quest.CA.Event.Mailbox.Extension.Custom.Attribute.3.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Extension Custom Attribute 4	Quest.CA.Event.Mailbox.Extension.Custom.Attribute.4.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Extension Custom Attribute 5	Quest.CA.Event.Mailbox.Extension.Custom.Attribute.5.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - External Out-of-Office Options	Quest.CA.Event.Mailbox.External.Out.of.Office.Options.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Federated Identity	Quest.CA.Event.Mailbox.Federated.Identity.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Forwarding Address	Quest.CA.Event.Mailbox.Forwarding.Address.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Forwarding SMTP Address	Quest.CA.Event.Mailbox.Forwarding.SMTP.Address.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - GMGen (Group Metrics Generation)	Quest.CA.Event.Mailbox.GMGen.Group.Metrics.Generation.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Grant Send on Behalf to	Quest.CA.Event.Mailbox.Grant.Send.on.Behalf.to.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Hidden From Address Lists Enabled	Quest.CA.Event.Mailbox.Hidden.From.Address.Lists.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Immutable ID	Quest.CA.Event.Mailbox.Immutable.ID.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Is Excluded from Serving Hierarchy	Quest.CA.Event.Mailbox.Is.Excluded.from.Serving.Hierarchy.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Issue Warning Quota	Quest.CA.Event.Mailbox.Issue.Warning.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Languages	Quest.CA.Event.Mailbox.Languages.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Linked Credential	Quest.CA.Event.Mailbox.Linked.Credential.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Linked Domain Controller	Quest.CA.Event.Mailbox.Linked.Domain.Controller.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Linked Master Account	Quest.CA.Event.Mailbox.Linked.Master.Account.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Litigation Hold Date	Quest.CA.Event.Mailbox.Litigation.Hold.Date.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Litigation Hold Duration	Quest.CA.Event.Mailbox.Litigation.Hold.Duration.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Litigation Hold Enabled	Quest.CA.Event.Mailbox.Litigation.Hold.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Litigation Hold Owner	Quest.CA.Event.Mailbox.Litigation.Hold.Owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Mail Tip	Quest.CA.Event.Mailbox.Mail.Tip.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Mail Tip Translations	Quest.CA.Event.Mailbox.Mail.Tip.Translations.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Mailbox Messages per Folder Count Receive Quota	Quest.CA.Event.Mailbox.Mailbox.Messages.per.Folder.Count.Receive.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Mailbox Messages per Folder Count Warning Quota	Quest.CA.Event.Mailbox.Mailbox.Messages.per.Folder.Count.Warning.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Managed Folder Mailbox Policy Allowed	Quest.CA.Event.Mailbox.Managed.Folder.Mailbox.Policy.Allowed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Managed Folder Mailbox Policy	Quest.CA.Event.Mailbox.Managed.Folder.Mailbox.Policy.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Management	Quest.CA.Event.Mailbox.Management.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Max Blocked Senders	Quest.CA.Event.Mailbox.Max.Blocked.Senders.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Max Receive Size	Quest.CA.Event.Mailbox.Max.Receive.Size.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Max Safe Senders	Quest.CA.Event.Mailbox.Max.Safe.Senders.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Max Send Size	Quest.CA.Event.Mailbox.Max.Send.Size.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Message Tracking Read Status Enabled	Quest.CA.Event.Mailbox.Message.Tracking.Read.Status.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Message Tracking	Quest.CA.Event.Mailbox.Message.Tracking.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Microsft Online Services ID	Quest.CA.Event.Mailbox.Microsft.Online.Services.ID.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Moderated By	Quest.CA.Event.Mailbox.Moderated.By.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Moderation Enabled	Quest.CA.Event.Mailbox.Moderation.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Name	Quest.CA.Event.Mailbox.Name.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - New Password	Quest.CA.Event.Mailbox.New.Password.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - OABGen	Quest.CA.Event.Mailbox.OABGen.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Office	Quest.CA.Event.Mailbox.Office.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Offline Address Book	Quest.CA.Event.Mailbox.Offline.Address.Book.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Old Password	Quest.CA.Event.Mailbox.Old.Password.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Password	Quest.CA.Event.Mailbox.Password.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Primary SMTP Address	Quest.CA.Event.Mailbox.Primary.SMTP.Address.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Prohibit Send Quota	Quest.CA.Event.Mailbox.Prohibit.Send.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Prohibit Send Receive Quota	Quest.CA.Event.Mailbox.Prohibit.Send.Receive.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Public Folder	Quest.CA.Event.Mailbox.Public.Folder.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Query Base DN Restriction Enabled	Quest.CA.Event.Mailbox.Query.Base.DN.Restriction.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Query Base DN	Quest.CA.Event.Mailbox.Query.Base.DN.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Recipient Limits	Quest.CA.Event.Mailbox.Recipient.Limits.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Recoverable Items Quota	Quest.CA.Event.Mailbox.Recoverable.Items.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Recoverable Items Warning Quota	Quest.CA.Event.Mailbox.Recoverable.Items.Warning.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Reject Messages From	Quest.CA.Event.Mailbox.Reject.Messages.From.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Remote Account Policy	Quest.CA.Event.Mailbox.Remote.Account.Policy.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Remote Recipient Type	Quest.CA.Event.Mailbox.Remote.Recipient.Type.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Remove Managed Folder and Policy	Quest.CA.Event.Mailbox.Remove.Managed.Folder.and.Policy.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Remove Picture	Quest.CA.Event.Mailbox.Remove.Picture.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Remove Spoken Name	Quest.CA.Event.Mailbox.Remove.Spoken.Name.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Removed	Quest.CA.Event.Mailbox.Removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Require Sender Authentication Enabled	Quest.CA.Event.Mailbox.Require.Sender.Authentication.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Reset Password on Next Logon	Quest.CA.Event.Mailbox.Reset.Password.on.Next.Logon.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Retain Deleted Items For	Quest.CA.Event.Mailbox.Retain.Deleted.Items.For.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Retain Deleted Items Until Backup	Quest.CA.Event.Mailbox.Retain.Deleted.Items.Until.Backup.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Retention Comment	Quest.CA.Event.Mailbox.Retention.Comment.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Retention Hold Enabled	Quest.CA.Event.Mailbox.Retention.Hold.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Retention Policy	Quest.CA.Event.Mailbox.Retention.Policy.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Retention URL	Quest.CA.Event.Mailbox.Retention.URL.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Role Assignment Policy	Quest.CA.Event.Mailbox.Role.Assignment.Policy.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Room Mailbox Password	Quest.CA.Event.Mailbox.Room.Mailbox.Password.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Rules Quota	Quest.CA.Event.Mailbox.Rules.Quota.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SAM Account Name	Quest.CA.Event.Mailbox.SAM.Account.Name.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Delete Enabled	Quest.CA.Event.Mailbox.SCL.Delete.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Delete Threshold	Quest.CA.Event.Mailbox.SCL.Delete.Threshold.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Junk Enabled	Quest.CA.Event.Mailbox.SCL.Junk.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Junk Threshold	Quest.CA.Event.Mailbox.SCL.Junk.Threshold.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Quarantine Enabled	Quest.CA.Event.Mailbox.SCL.Quarantine.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Quarantine Threshold	Quest.CA.Event.Mailbox.SCL.Quarantine.Threshold.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Reject Enabled	Quest.CA.Event.Mailbox.SCL.Reject.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - SCL Reject Threshold	Quest.CA.Event.Mailbox.SCL.Reject.Threshold.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Secondary Address	Quest.CA.Event.Mailbox.Secondary.Address.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Secondary Dial Plan	Quest.CA.Event.Mailbox.Secondary.Dial.Plan.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Send Moderation Notifications	Quest.CA.Event.Mailbox.Send.Moderation.Notifications.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Simple Display Name	Quest.CA.Event.Mailbox.Simple.Display.Name.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Single Item Recovery Enabled	Quest.CA.Event.Mailbox.Single.Item.Recovery.Enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Start Date for Retention Hold	Quest.CA.Event.Mailbox.Start.Date.for.Retention.Hold.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Throttling Policy	Quest.CA.Event.Mailbox.Throttling.Policy.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Type	Quest.CA.Event.Mailbox.Type.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - UM Data Storage	Quest.CA.Event.Mailbox.UM.Data.Storage.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - UM DTMF Map	Quest.CA.Event.Mailbox.UM.DTMF.Map.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - UM Grammar	Quest.CA.Event.Mailbox.UM.Grammar.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Use Database Quota Defaults	Quest.CA.Event.Mailbox.Use.Database.Quota.Defaults.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Use Database Retention Defaults	Quest.CA.Event.Mailbox.Use.Database.Retention.Defaults.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - User Certificate	Quest.CA.Event.Mailbox.User.Certificate.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - User Principal Name	Quest.CA.Event.Mailbox.User.Principal.Name.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - User S/MIME Certificate	Quest.CA.Event.Mailbox.User.S.MIME.Certificate.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Windows Email Address	Quest.CA.Event.Mailbox.Windows.Email.Address.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Mailbox - Windows Live ID	Quest.CA.Event.Mailbox.Windows.Live.ID.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Member added to Lync administration group	Quest.CA.Event.Member.added.to.Lync.administration.group.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Member removed from Lync administration group	Quest.CA.Event.Member.removed.from.Lync.administration.group.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message copied in online mailbox by non-owner	Quest.CA.Event.Message.copied.in.online.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message copied in online shared mailbox by non-owner	Quest.CA.Event.Message.copied.in.online.shared.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message created in online mailbox folder by non-owner	Quest.CA.Event.Message.created.in.online.mailbox.folder.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message created in online mailbox shared folder by non-owner	Quest.CA.Event.Message.created.in.online.mailbox.shared.folder.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message hard-deleted in online mailbox by non-owner	Quest.CA.Event.Message.hard.deleted.in.online.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message hard-deleted in online shared mailbox by non-owner	Quest.CA.Event.Message.hard.deleted.in.online.shared.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message moved in online mailbox by non-owner	Quest.CA.Event.Message.moved.in.online.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message moved in online shared mailbox by non-owner	Quest.CA.Event.Message.moved.in.online.shared.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message moved to Deleted Items in online mailbox by non-owner	Quest.CA.Event.Message.moved.to.Deleted.Items.in.online.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message moved to Deleted Items in online shared mailbox by non-owner	Quest.CA.Event.Message.moved.to.Deleted.Items.in.online.shared.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message sent as another user in online mailbox	Quest.CA.Event.Message.sent.as.another.user.in.online.mailbox.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message sent as another user in online shared mailbox	Quest.CA.Event.Message.sent.as.another.user.in.online.shared.mailbox.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message sent on behalf of another user in online mailbox	Quest.CA.Event.Message.sent.on.behalf.of.another.user.in.online.mailbox.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message sent on behalf of another user in online shared mailbox	Quest.CA.Event.Message.sent.on.behalf.of.another.user.in.online.shared.mailbox.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message soft-deleted in online mailbox by non-owner	Quest.CA.Event.Message.soft.deleted.in.online.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Message soft-deleted in online shared mailbox by non-owner	Quest.CA.Event.Message.soft.deleted.in.online.shared.mailbox.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: OWA Web Site - Live ID Authentication	Quest.CA.Event.OWA.Web.Site.Live.ID.Authentication.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Private report disabled	Quest.CA.Event.Private.report.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Private user alert disabled	Quest.CA.Event.Private.user.alert.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Public report disabled	Quest.CA.Event.Public.report.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Public report enabled	Quest.CA.Event.Public.report.enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Report layout added	Quest.CA.Event.Report.layout.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Report layout changed	Quest.CA.Event.Report.layout.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Report layout removed	Quest.CA.Event.Report.layout.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Security Event Log Cleared	Quest.CA.Event.Security.Event.Log.Cleared.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Lookup Exchange Account changed	Quest.CA.Event.SMTP.Lookup.Exchange.Account.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Lookup Exchange Authorization disabled	Quest.CA.Event.SMTP.Lookup.Exchange.Authorization.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Lookup Exchange Authorization enabled	Quest.CA.Event.SMTP.Lookup.Exchange.Authorization.enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Lookup Exchange Email changed	Quest.CA.Event.SMTP.Lookup.Exchange.Email.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Lookup Exchange Host changed	Quest.CA.Event.SMTP.Lookup.Exchange.Host.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Lookup Exchange Password changed	Quest.CA.Event.SMTP.Lookup.Exchange.Password.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Lookup Exchange Version changed	Quest.CA.Event.SMTP.Lookup.Exchange.Version.changed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Ssl disabled	Quest.CA.Event.SMTP.Ssl.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SMTP Ssl enabled	Quest.CA.Event.SMTP.Ssl.enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud auditing template added	Quest.CA.Event.SonicWALL.Cloud.auditing.template.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud auditing template disabled	Quest.CA.Event.SonicWALL.Cloud.auditing.template.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud auditing template enabled	Quest.CA.Event.SonicWALL.Cloud.auditing.template.enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud auditing template removed	Quest.CA.Event.SonicWALL.Cloud.auditing.template.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud event added	Quest.CA.Event.SonicWALL.Cloud.event.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud event removed	Quest.CA.Event.SonicWALL.Cloud.event.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud facility added	Quest.CA.Event.SonicWALL.Cloud.facility.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud facility removed	Quest.CA.Event.SonicWALL.Cloud.facility.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud Storage auditing template added to agent configuration	Quest.CA.Event.SonicWALL.Cloud.Storage.auditing.template.added.to.agent.configuration.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud Storage auditing template removed from agent configuration	Quest.CA.Event.SonicWALL.Cloud.Storage.auditing.template.removed.from.agent.configuration.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud Storage site added to auditing template	Quest.CA.Event.SonicWALL.Cloud.Storage.site.added.to.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud Storage site changed in auditing template	Quest.CA.Event.SonicWALL.Cloud.Storage.site.changed.in.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Cloud Storage site removed from auditing template	Quest.CA.Event.SonicWALL.Cloud.Storage.site.removed.from.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web auditing template added	Quest.CA.Event.SonicWALL.Web.auditing.template.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web auditing template disabled	Quest.CA.Event.SonicWALL.Web.auditing.template.disabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web auditing template enabled	Quest.CA.Event.SonicWALL.Web.auditing.template.enabled.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web auditing template removed	Quest.CA.Event.SonicWALL.Web.auditing.template.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web event added	Quest.CA.Event.SonicWALL.Web.event.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web event removed	Quest.CA.Event.SonicWALL.Web.event.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web facility added	Quest.CA.Event.SonicWALL.Web.facility.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web facility removed	Quest.CA.Event.SonicWALL.Web.facility.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web path added to auditing template	Quest.CA.Event.SonicWALL.Web.path.added.to.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web path changed in auditing template	Quest.CA.Event.SonicWALL.Web.path.changed.in.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web path removed from auditing template	Quest.CA.Event.SonicWALL.Web.path.removed.from.auditing.template.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web Site auditing template added to agent configuration	Quest.CA.Event.SonicWALL.Web.Site.auditing.template.added.to.agent.configuration.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: SonicWALL Web Site auditing template removed from agent configuration	Quest.CA.Event.SonicWALL.Web.Site.auditing.template.removed.from.agent.configuration.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: System event log rolled over	Quest.CA.Event.System.event.log.rolled.over.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Topology server added	Quest.CA.Event.Topology.server.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Topology server removed	Quest.CA.Event.Topology.server.removed.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: Topology workstation added	Quest.CA.Event.Topology.workstation.added.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: UM Dial Plan - Callers Can Contact Recipient List	Quest.CA.Event.UM.Dial.Plan.Callers.Can.Contact.Recipient.List.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User authenticated through Kerberos	Quest.CA.Event.User.authenticated.through.Kerberos.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User failed to authenticate through Kerberos	Quest.CA.Event.User.failed.to.authenticate.through.Kerberos.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User failed to log on interactively from a remote computer	Quest.CA.Event.User.failed.to.log.on.interactively.from.a.remote.computer.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User failed to log on interactively	Quest.CA.Event.User.failed.to.log.on.interactively.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User failed to perform a network logon from a remote computer	Quest.CA.Event.User.failed.to.perform.a.network.logon.from.a.remote.computer.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User logged on interactively from a remote computer	Quest.CA.Event.User.logged.on.interactively.from.a.remote.computer.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User logged on interactively	Quest.CA.Event.User.logged.on.interactively.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User password changed by non-owner	Quest.CA.Event.User.password.changed.by.non.owner.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True
	CA Event: User performed a successful network logon from a remote computer	Quest.CA.Event.User.performed.a.successful.network.logon.from.a.remote.computer.Rule	ChangeAuditor.Quest_ChangeAuditor_Installation	Custom	True	True