EventSentry
  • System32
  • Sysmon
  • Events
  • Compliance
  • Validator
  • TLS/SSL
  • GeoIP
  • Tools


Windows Security Events



Audit Category
  • Account Management (15)
Operating Systems
  • Windows 2008 (15)
  • Windows 2008 R2 (15)
  • Windows 2012 (15)
  • Windows 2012 R2 (15)
  • Windows 2016 (15)
  • Windows 10 (14)
  • Windows 2022 (14)
  • Windows 7 (14)
  • Windows 8 (14)
  • Windows 8.1 (14)
  • Windows 2019 (10)
  • Windows Vista (10)
  • Windows 11 (9)
Tags
  • Domain Controller (10)
  • Audit Success (5)
Auditing
Volume
Audit Subcategory
  • Distribution Group Management (15)

AppLocker
  • All AppLocker events
EventSentry
  • All EventSentry events
Security
  • All Windows Security events
Sysmon
  • All Sysmon events
ID Event Description
4744 A security-disabled local group was created
4745 A security-disabled local group was changed
4746 A member was added to a security-disabled local group
4747 A member was removed from a security-disabled local group
4748 A security-disabled local group was deleted
4749 A security-disabled global group was created
Domain Controller, Audit Success
4750 A security-disabled global group was changed
Domain Controller, Audit Success
4751 A member was added to a security-disabled global group
Domain Controller, Audit Success
4752 A member was removed from a security-disabled global group
Domain Controller, Audit Success
4753 A security-disabled global group was deleted
Domain Controller, Audit Success
4759 A security-disabled universal group was created
Domain Controller
4760 A security-disabled universal group was changed
Domain Controller
4761 A member was added to a security-disabled universal group
Domain Controller
4762 A member was removed from a security-disabled universal group
Domain Controller
4763 A security-disabled universal group was deleted
Domain Controller



© netikus.net ltd 2002-2025 | EventSentry | Event Log Messages | Codes | Sysmon | AppLocker | Privacy Policy