Metadatacopystruct _EVENT_FILTER_LEVEL_KW { unsigned __int64 MatchAnyKeyword;/* 0x0 8 */ unsigned __int64 MatchAllKeyword;/* 0x8 8 */ unsigned char Level;/* 0x10 1 */ unsigned char FilterIn;/* 0x11 1 */};