| ID | Event Description |
|---|---|
| 4610 | An authentication package has been loaded by the Local Security Authority Audit Success |
| 4611 | A trusted logon process has been registered with the Local Security Authority Audit Success |
| 4614 | A notification package has been loaded by the Security Account Manager Audit Success |
| 4622 | A security package has been loaded by the Local Security Authority Audit Success |
| 4697 | A service was installed in the system Audit Success |