(?ms)applies the following effective flags to the remainder of the pattern: gms m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string
s modifier: single line. Allows a dot to match line terminators
EventCode=the literal text EventCode= (case sensitive) 4624the literal text 4624 4634the literal text 4634 4625the literal text 4625 \s+any whitespace character, repeated at least once
.*any character, repeated any number of times
\.the literal . (4610 / 568 / 2E16)
admthe literal text adm (case sensitive) g modifier: global. Finds all matches instead of stopping after the first
m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string