Windows Security Events

Audit Category

• Policy Change (5)

Operating Systems

• Windows 10 (5)
• Windows 2008 (5)
• Windows 2008 R2 (5)
• Windows 2012 (5)
• Windows 2012 R2 (5)
• Windows 2016 (5)
• Windows 2019 (5)
• Windows 2022 (5)
• Windows 2025 (5)
• Windows 7 (5)
• Windows 8 (5)
• Windows 8.1 (5)
• Windows Vista (5)
• Windows 11 (4)

Tags

• Audit Success (1)

Auditing

• Conditional (2)
• Rarely (2)
• Always (1)

Volume

• Low (4)
• Medium (2)
• High (1)

Audit Subcategory

• Filtering Platform Policy Change (4)
• Other Policy Change Events (1)

---

AppLocker

• All AppLocker events

EventSentry

• All EventSentry events

Security

• All Windows Security events

Sysmon

• All Sysmon events