| ID | Event Description |
|---|---|
| 4610 |
An authentication package has been loaded by the Local Security Authority
Audit Success
|
| 4611 |
A trusted logon process has been registered with the Local Security Authority
Audit Success
|
| 4614 |
A notification package has been loaded by the Security Account Manager
Audit Success
|
| 4622 |
A security package has been loaded by the Local Security Authority
Audit Success
|
| 4697 |
A service was installed in the system
Audit Success
|