Event ID: 4618

A monitored security event pattern has occurred.

A monitored security event pattern has occurred.

Subject:
    Security ID:        %3
    Account Name:       %4
    Account Domain:     %5
    Logon ID:       %6

Alert Information:
    Computer:       %2
    Event ID:       %1
    Number of Events:   %7
    Duration:       %8

This event is generated when Windows is configured to generate alerts in accordance with the Common Criteria Security Audit Analysis requirements (FAU_SAA) and an auditable event pattern occurs.
Microsoft Documentation

Event ID - 4618





Name Field Insertion String OS Example
Event ID EventId %1 Any 4624
Computer ComputerName %2 Any DC02.mydomain.local
Security ID TargetUserSid %3 Any MYDOMAIN\Admin15
Account Name TargetUserName %4 Any Admin15
Account Domain TargetUserDomain %5 Any MYDOMAIN
Logon ID TargetLogonId %6 Any 0x1
Number of Events EventCount %7 Any 15
Duration Duration %8 Any "Hour"


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"System Integrity"
How to enable Windows Auditing



LEFT/RIGHT arrow keys for navigation

Back to List