From 43af558309577d4cfc0af30192c40ac2990e612f Mon Sep 17 00:00:00 2001
From: Andrew Rathbun <36825567+AndrewRathbun@users.noreply.github.com>
Date: Sun, 2 Jun 2024 08:33:05 -0400
Subject: [PATCH] Update System_EventLog_6011.map

fix comment spacing issue
---
 evtx/Maps/System_EventLog_6011.map | 44 +++++++++++++++---------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/evtx/Maps/System_EventLog_6011.map b/evtx/Maps/System_EventLog_6011.map
index a92523a..c3f6cde 100644
--- a/evtx/Maps/System_EventLog_6011.map
+++ b/evtx/Maps/System_EventLog_6011.map
@@ -23,25 +23,25 @@ Maps:
 # https://learn.microsoft.com/en-us/answers/questions/1060679/recall-previous-device-names-on-endpoint-manager
 #
 # Example Event Data:
-#<Event>
-#  <System>
-#    <Provider Name="EventLog" />
-#    <EventID Qualifiers="32768">6011</EventID>
-#    <Version>0</Version>
-#    <Level>4</Level>
-#    <Task>0</Task>
-#    <Opcode>0</Opcode>
-#    <Keywords>0x80000000000000</Keywords>
-#    <TimeCreated SystemTime="2024-05-28 00:46:49.8687258" />
-#    <EventRecordID>148</EventRecordID>
-#    <Correlation />
-#    <Execution ProcessID="2592" ThreadID="2676" />
-#    <Channel>System</Channel>
-#    <Computer>DESKTOP-F3BMVE4</Computer>
-#    <Security />
-#  </System>
-#  <EventData>
-#    <Data>WIN-76PGSVBIM7I, DESKTOP-F3BMVE4</Data>
-#    <Binary></Binary>
-#  </EventData>
-#</Event>
+# <Event>
+#   <System>
+#     <Provider Name="EventLog" />
+#     <EventID Qualifiers="32768">6011</EventID>
+#     <Version>0</Version>
+#     <Level>4</Level>
+#     <Task>0</Task>
+#     <Opcode>0</Opcode>
+#     <Keywords>0x80000000000000</Keywords>
+#     <TimeCreated SystemTime="2024-05-28 00:46:49.8687258" />
+#     <EventRecordID>148</EventRecordID>
+#     <Correlation />
+#     <Execution ProcessID="2592" ThreadID="2676" />
+#     <Channel>System</Channel>
+#     <Computer>DESKTOP-F3BMVE4</Computer>
+#     <Security />
+#   </System>
+#   <EventData>
+#     <Data>WIN-76PGSVBIM7I, DESKTOP-F3BMVE4</Data>
+#     <Binary></Binary>
+#   </EventData>
+# </Event>