System32
Events
Scripts
Codes
GeoIP
Tools
Audit Category
Privilege Use
(5)
Audit Subcategory
Sensitive Privilege Use
(2)
Non Sensitive Privilege Use
(1)
Operating Systems
Windows 2003
(3)
Windows Server 2000
(3)
Windows XP
(3)
Windows 10
(2)
Windows 2008
(2)
Windows 2008 R2
(2)
Windows 2012
(2)
Windows 2012 R2
(2)
Windows 2016
(2)
Windows 2019
(2)
Windows 7
(2)
Windows 8
(2)
Windows 8.1
(2)
Windows Vista
(2)
Tags
ID
Event Description
4673
A privileged service was called
4674
An operation was attempted on a privileged object
576
Special privileges assigned to new logon
577
Privileged Service Called
578
Privileged object operation