| ID | Event Description |
|---|---|
| 4670 | Permissions on an object were changed Audit Success |
| 4706 | A new trust was created to a domain Domain Controller, Audit Success |
| 4707 | A trust to a domain was removed Domain Controller, Audit Success |
| 4713 | Kerberos policy was changed Domain Controller, Audit Success |
| 4716 | Trusted domain information was modified Domain Controller, Audit Success |
| 4717 | System security access was granted to an account ISO 27001:2013, NIST 800-171, NIST SP 800-53, Audit Success, CMMC L3 |
| 4718 | System security access was removed from an account ISO 27001:2013, NIST 800-171, NIST SP 800-53, CMMC L3 |
| 4739 | Domain Policy was changed Domain Controller, NIST 800-171, NIST SP 800-53, ISO 27001:2013, Audit Success, CMMC L3 |
| 4864 | A namespace collision was detected |
| 4865 | A trusted forest information entry was added |
| 4866 | A trusted forest information entry was removed |
| 4867 | A trusted forest information entry was modified |