Event Log Security - Windows Event Search

ID	Event Description
4624	An account was successfully logged on CJIS, Audit Success, ISO 27001:2013, HIPAA, NIST SP 800-53, CMMC L1, NIST 800-171
4661	A handle to an object was requested Domain Controller, Audit Success, Audit Failure
4662	An operation was performed on an object Domain Controller, Audit Success, Audit Failure
4673	A privileged service was called Audit Success
4674	An operation was attempted on a privileged object Audit Failure, Audit Success
4769	A Kerberos service ticket was requested Domain Controller, Audit Success, Audit Failure, CJIS, ISO 27001:2013, HIPAA, NIST 800-171, NIST SP 800-53, CMMC L1
4770	A Kerberos service ticket was renewed Domain Controller, Audit Success
5145	A network share object was checked to see whether client can be granted desired access. Audit Success, Audit Failure
5152	The Windows Filtering Platform has blocked a packet. Audit Failure
5153	A more restrictive Windows Filtering Platform filter has blocked a packet. Audit Success
5156	The Windows Filtering Platform has allowed a connection. Audit Success
5157	The Windows Filtering Platform has blocked a connection. Audit Failure