Event Log Security - Windows Event Search

ID	Event Description
4661	A handle to an object was requested Domain Controller, Audit Success, Audit Failure
4662	An operation was performed on an object Domain Controller, Audit Success, Audit Failure
4928	An Active Directory replica source naming context was established Domain Controller, Audit Success, Audit Failure
4929	An Active Directory replica source naming context was removed Domain Controller, Audit Success, Audit Failure
4930	An Active Directory replica source naming context was modified Domain Controller, Audit Success, Audit Failure
4931	An Active Directory replica destination naming context was modified Domain Controller, Audit Success, Audit Failure
4932	Synchronization of a replica of an Active Directory naming context has begun Audit Success, Audit Failure, Domain Controller
4933	Synchronization of a replica of an Active Directory naming context has ended Audit Success, Audit Failure, Domain Controller
4934	Attributes of an Active Directory object were replicated Domain Controller, Audit Success, Audit Failure
4935	Replication failure begins Domain Controller, Audit Success, Audit Failure
4936	Replication failure ends Domain Controller, Audit Success, Audit Failure
4937	A lingering object was removed from a replica Audit Success
5136	A directory service object was modified Domain Controller, Audit Success
5137	A directory service object was created Domain Controller, Audit Success
5138	A directory service object was undeleted. Domain Controller, Audit Success
5139	A directory service object was moved. Domain Controller, Audit Success
5141	A directory service object was deleted. Domain Controller, Audit Success
5169	A directory service object was modified. Domain Controller, Audit Success, Audit Failure