Last week, unexpected spaces were observed in Windows 10 Command Line SIEM logs. For instance, 'ping 1.1.1.1' turns into 'ping 1.1.1.1 net user bob/do'. This article provides a possible explanation and solution.