Hello for, windows events proceed in JSON but some fields like "CommandLine", "TaskContent", "EventData" e.t.c arrives with XML escaping character, like &lt; is < &gt; is > &amp; is & &quot; is " Is it possible to disable escaping globally? Or the only option to solve the problem is using unescape_xml function for every field like: $CommandLine = unescape_xml($CommandLine); $TaskContent = unescape_xml($TaskContent);