Event ID: 4610An authentication package has been loaded by the Local Security Authority
An authentication package has been loaded by the Local Security Authority. This authentication package will be used to authenticate logon attempts. Authentication Package Name: %1
This event generates every time Authentication Package has been loaded by the Local Security Authority (LSA).
Each time the system starts, the LSA loads the Authentication Package DLLs from HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages registry value and performs the initialization sequence for every package located in these DLLs.
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Security System Extension"
LEFT/RIGHT arrow keys for navigationBack to List