Windows Security Events

Audit Category

• Logon/Logoff (1)

Operating Systems

• Windows 10 (1)
• Windows 2008 (1)
• Windows 2008 R2 (1)
• Windows 2012 (1)
• Windows 2012 R2 (1)
• Windows 2016 (1)
• Windows 2019 (1)
• Windows 2022 (1)
• Windows 7 (1)
• Windows 8 (1)
• Windows 8.1 (1)
• Windows Vista (1)

Tags

• Audit Failure (1)
• CJIS (1)
• CMMC L1 (1)
• HIPAA (1)
• ISO 27001:2013 (1)
• NIST 800-171 (1)
• NIST SP 800-53 (1)
• PCI-DSS (1)

Auditing

• Always (1)

Volume

• Low (1)
• Medium (1)

Audit Subcategory

• Account Lockout (1)
• Logon (1)

---

AppLocker

• All AppLocker events

EventSentry

• All EventSentry events

Security

• All Windows Security events

Sysmon

• All Sysmon events