Windows Security Log Events
Categories:
All categories
Account Logon
Account Management
Directory Service
Logon/Logoff
Non Audit (Event Log)
Object Access
Policy Change
Privilege Use
Process Tracking
System
Uncategorized
All events
Win2000, XP and Win2003 only
Vista and Win2008 only
Required when sub-category selected.
Subcategories:
(Vista and Win2008 only)
All subcategories
Account Lockout
IPsec Extended Mode
IPsec Main Mode
IPsec Quick Mode
Logoff
Logon
Network Policy Server
Other Logon/Logoff Events
Special Logon
Category:
Logon/Logoff
Subcategory:
Logon
4624
-
An account was successfully logged on
4625
-
An account failed to log on
4648
-
A logon was attempted using explicit credentials
Upcoming Webinars
Absolute Power: Controlling the Risk of Domain Admins
Patch + AV: Better Together
Catching Intruders by Enriching Security Logs with Geolocation and Network Visualization
Additional Resources
Security Log Quick Reference Chart
Security Log Resource Kit
Learn about the SharePoint Audit Log
Patch Tuesday Analysis
Encyclopedia
•
All Event IDs
•
Audit Policy
Go To Event ID:
Security Log
Quick Reference
Chart
Download now!
Home
>
Security Log
>
Encyclopedia
User name:
Password:
/
Forgot?
Register
Home