Windows Security Log Events
All Sources
Windows Audit
SharePoint Audit
(
LOGbinder for SharePoint
)
SQL Server Audit
(
LOGbinder for SQL Server
)
Exchange Audit
(
LOGbinder for Exchange
)
Sysmon
(
MS Sysinternals Sysmon
)
Windows Audit Categories:
All categories
Account Logon
Account Management
Directory Service
Logon/Logoff
Non Audit (Event Log)
Object Access
Policy Change
Privilege Use
Process Tracking
System
Uncategorized
Subcategories:
All subcategories
Audit Policy Change
Authentication Policy Change
Authorization Policy Change
Filtering Platform Policy Change
MPSSVC Rule-Level Policy Change
Other Policy Change Events
Windows Versions:
All events
Win2000, XP and Win2003 only
Win2008, Win2012R2, Win2016 and Win10+, Win2019
Required when sub-category selected.
Category:
Policy Change
Subcategory:
Other Policy Change Events
Windows
4819
Central Access Policies on the machine have been changed
Windows
4826
Boot Configuration Data loaded
Windows
5063
A cryptographic provider operation was attempted
Windows
5064
A cryptographic context operation was attempted
Windows
5065
A cryptographic context modification was attempted
Windows
5066
A cryptographic function operation was attempted
Windows
5067
A cryptographic function modification was attempted
Windows
5068
A cryptographic function provider operation was attempted
Windows
5069
A cryptographic function property operation was attempted
Windows
5070
A cryptographic function property operation was attempted
Windows
5447
A Windows Filtering Platform filter has been changed
Windows
6144
Security policy in the group policy objects has been applied successfully
Windows
6145
One or more errors occured while processing security policy in the group policy objects
Stay up-to-date on the Latest in Cybersecurity
Sign up for the Ultimate IT Security newsletter to hear about the latest webinars, patches, CVEs, attacks, and more.
Work Email:
Upcoming Webinars
Assessing the Security of Your Active Directory: User Accounts
Additional Resources
Encyclopedia
•
Event IDs
•
All Event IDs
•
Audit Policy
Go To Event ID:
Security Log
Quick Reference
Chart
Download now!
Tweet
User name:
Password:
/
Forgot?
Register
March 2024
Patch Tuesday
"Patch Tuesday - Zero Zero Days! " - sponsored by LOGbinder
Home
Cookies help us deliver the best experience on our website. By using our website, you agree to the use of cookies.