[hobbit] Filtering event logs from windows sytems bbnt client