Windows Security Events

Audit Category

• Logon/Logoff (2)

Operating Systems

• Windows 10 (2)
• Windows 2016 (2)
• Windows 2019 (2)
• Windows 2022 (2)
• Windows 2012 (1)
• Windows 2012 R2 (1)
• Windows 8 (1)
• Windows 8.1 (1)

Tags

• Audit Success (2)

Auditing

• Always (2)

Volume

• Low (2)
• Medium (2)
• High (1)

Audit Subcategory

• Group Membership (1)
• User / Device Claims (1)

---

AppLocker

• All AppLocker events

EventSentry

• All EventSentry events

Security

• All Windows Security events

Sysmon

• All Sysmon events