System 
  - Provider 
   [ Name]  Microsoft-Windows-DNS-Client 
   [ Guid]  {1C95126E-7EEA-49A9-A3FE-A378B03DDB4D}  
   EventID 1014  
   Version 0  
   Level 3  
   Task 0  
   Opcode 0  
   Keywords 0x4000000000000000  
  - TimeCreated 
   [ SystemTime]  2017-10-03T00:17:07.789187100Z  
   EventRecordID 237405  
   Correlation  
  - Execution 
   [ ProcessID]  1380 
   [ ThreadID]  3352  
   Channel System  
   Computer RickMcCoy-PCDesktop  
  - Security 
   [ UserID]  S-1-5-20  
- EventData 
  QueryName 
www.asdjkljfjaowjfq.net   AddressLength 16 
  Address 02000035C0A802010000000000000000