Windows Security Events

Audit Category

• Logon/Logoff (3)

Operating Systems

• Windows 10 (3)
• Windows 11 (3)
• Windows 2008 (3)
• Windows 2008 R2 (3)
• Windows 2012 (3)
• Windows 2012 R2 (3)
• Windows 2016 (3)
• Windows 2019 (3)
• Windows 2022 (3)
• Windows 2025 (3)
• Windows 7 (3)
• Windows 8 (3)
• Windows 8.1 (3)
• Windows Vista (3)

Tags

• Audit Failure (3)

Auditing

Volume

Audit Subcategory

• IPsec Main Mode (2)
• IPsec Quick Mode (1)

AppLocker

• All AppLocker events

EventSentry

• All EventSentry events

Security

• All Windows Security events

Sysmon

• All Sysmon events