| ID | Event Description |
|---|---|
| 4624 | An account was successfully logged on CJIS, Audit Success, ISO 27001:2013, HIPAA, NIST SP 800-53, CMMC L1, NIST 800-171, PCI-DSS |
| 4625 | An account failed to log on Audit Failure, CJIS, ISO 27001:2013, PCI-DSS, HIPAA, NIST SP 800-53, NIST 800-171, CMMC L1 |
| 4634 | An account was logged off Audit Success |
| 4647 | User initiated logoff Audit Success |
| 4648 | A logon was attempted using explicit credentials Audit Success |