20191101 11:19:45.866 I   dbc EFRSalCommon::BaseSal::SetSalEventHandler: Sal Event Handler is set
20191101 11:19:45.866 I   dbc EFRSalCommon::BaseSal::Start: Starting, PID=4028
20191101 11:19:45.866 V  150c EFRSalCommon::BaseSal::DataCollectThread: Thread started
20191101 11:19:46.913 V   dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:UnsignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE
20191101 11:19:46.913 V   dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:SignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE
20191101 11:19:46.913 V   dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:ShadowCopyDeletion Mode:Off, parameters:
20191101 11:19:46.913 V   dbc ARSal::ApplyARDetectionPolicy: About to set detection, type:AbnormalSvchostLaunch Mode:Off, parameters:
20191101 11:20:51.153 I   fb8 EFRSalCommon::BaseSal::Stop: Stopping, PID=4028
20191101 11:20:51.153 V  150c EFRSalCommon::BaseSal::Run: Shutdown event is signaled, exiting.
20191101 11:20:51.153 V  150c EFRSalCommon::BaseSal::DataCollectThread: Thread exited
20191101 11:21:46.934 I  1bcc EFRSalCommon::BaseSal::SetSalEventHandler: Sal Event Handler is set
20191101 11:21:46.934 I  1bcc EFRSalCommon::BaseSal::Start: Starting, PID=6996
20191101 11:21:46.934 V  1bf8 EFRSalCommon::BaseSal::DataCollectThread: Thread started
20191101 11:21:47.106 V  1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:UnsignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE
20191101 11:21:47.106 V  1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:SignedAbnormalLaunch Mode:Off, parameters:WINWORD.EXE
20191101 11:21:47.106 V  1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:ShadowCopyDeletion Mode:Off, parameters:
20191101 11:21:47.106 V  1bcc ARSal::ApplyARDetectionPolicy: About to set detection, type:AbnormalSvchostLaunch Mode:Off, parameters:
20191101 11:36:37.125 I  1b24 EFRSalCommon::BaseSal::Stop: Stopping, PID=6996
20191101 11:36:37.125 V  1bf8 EFRSalCommon::BaseSal::Run: Shutdown event is signaled, exiting.
20191101 11:36:37.125 V  1bf8 EFRSalCommon::BaseSal::DataCollectThread: Thread exited