EventSentry
  • System32
  • Sysmon
  • Events
  • Compliance
  • Validator
  • TLS/SSL
  • GeoIP
  • Tools


Windows Security Events



Audit Category
  • Logon/Logoff (3)
Operating Systems
  • Windows 10 (3)
  • Windows 2008 (3)
  • Windows 2008 R2 (3)
  • Windows 2012 (3)
  • Windows 2012 R2 (3)
  • Windows 2016 (3)
  • Windows 2019 (3)
  • Windows 2022 (3)
  • Windows 7 (3)
  • Windows 8 (3)
  • Windows 8.1 (3)
  • Windows Vista (3)
  • Windows 11 (2)
Tags
  • Audit Success (3)
  • CMMC L3 (2)
  • NIST 800-171 (2)
  • NIST SP 800-53 (2)
Auditing
  • Always (2)
  • Conditional (1)
Volume
  • Low (3)
  • Medium (3)
  • High (1)
Audit Subcategory
  • Other Logon/Logoff Events (2)
  • Logoff (1)

AppLocker
  • All AppLocker events
EventSentry
  • All EventSentry events
Security
  • All Windows Security events
Sysmon
  • All Sysmon events
ID Event Description
4634 An account was logged off
Audit Success
4778 A session was reconnected to a Window Station
Audit Success, NIST 800-171, NIST SP 800-53, CMMC L3
4779 A session was disconnected from a Window Station
Audit Success, NIST 800-171, NIST SP 800-53, CMMC L3



© netikus.net ltd 2002-2025 | EventSentry | Event Log Messages | Codes | Sysmon | STIG | AppLocker | Privacy Policy