EventSentry
  • System32
  • Sysmon
  • Events
  • Compliance
  • Validator
  • TLS/SSL
  • GeoIP
  • Tools


Windows Security Events



Audit Category
  • DS Access (5)
Operating Systems
  • Windows 2008 (5)
  • Windows 2008 R2 (5)
  • Windows 2012 (5)
  • Windows 2012 R2 (5)
  • Windows 2016 (5)
  • Windows 2019 (5)
  • Windows 2022 (5)
  • Windows 10 (3)
  • Windows 11 (3)
  • Windows 7 (2)
  • Windows 8 (2)
  • Windows 8.1 (2)
  • Windows Vista (2)
Tags
  • Audit Success (5)
  • Domain Controller (5)
Auditing
  • Conditional (5)
Volume
Audit Subcategory
  • Directory Service Changes (5)

AppLocker
  • All AppLocker events
EventSentry
  • All EventSentry events
Security
  • All Windows Security events
Sysmon
  • All Sysmon events
ID Event Description
5136 A directory service object was modified
Domain Controller, Audit Success
5137 A directory service object was created
Domain Controller, Audit Success
5138 A directory service object was undeleted.
Domain Controller, Audit Success
5139 A directory service object was moved.
Domain Controller, Audit Success
5141 A directory service object was deleted.
Domain Controller, Audit Success



© netikus.net ltd 2002-2025 | EventSentry | Event Log Messages | Codes | Sysmon | STIG | AppLocker | Privacy Policy