EventSentry
  • System32
  • Events
  • Compliance
  • Validator
  • TLS/SSL
  • PingSentry
  • GeoIP
  • Tools







Audit Category
  • Object Access (5)
  • Account Logon (2)
  • DS Access (2)
  • Privilege Use (2)
  • Logon/Logoff (1)
Audit Subcategory
  • Directory Service Access (2)
  • Filtering Platform Connection (2)
  • Filtering Platform Packet Drop (2)
  • Kerberos Service Ticket Operations (2)
  • Sensitive Privilege Use (2)
  • Detailed File Share (1)
  • Logon (1)
  • Non Sensitive Privilege Use (1)
  • SAM (1)
Operating Systems
  • Windows 2008 R2 (12)
  • Windows 2012 (12)
  • Windows 2012 R2 (12)
  • Windows 2016 (12)
  • Windows 2019 (12)
  • Windows 2008 (11)
  • Windows 10 (10)
  • Windows 7 (10)
  • Windows 8 (10)
  • Windows 8.1 (10)
  • Windows Vista (8)
Tags
  • Audit Success (10)
  • Audit Failure (7)
  • Domain Controller (4)
  • CJIS (2)
  • CMMC L1 (2)
  • HIPAA (2)
  • ISO 27001:2013 (2)
  • NIST 800-171 (2)
  • NIST SP 800-53 (2)
Auditing
  • Rarely (7)
  • Conditional (4)
Volume
  • High (12)
  • Very high (12)
  • Medium (4)
  • Low (1)
EventSentry
  • All events
ID Event Description
4624 An account was successfully logged on
CJIS, Audit Success, ISO 27001:2013, HIPAA, NIST SP 800-53, CMMC L1, NIST 800-171
4661 A handle to an object was requested
Domain Controller, Audit Success, Audit Failure
4662 An operation was performed on an object
Domain Controller, Audit Success, Audit Failure
4673 A privileged service was called
Audit Success
4674 An operation was attempted on a privileged object
Audit Failure, Audit Success
4769 A Kerberos service ticket was requested
Domain Controller, Audit Success, Audit Failure, CJIS, ISO 27001:2013, HIPAA, NIST 800-171, NIST SP 800-53, CMMC L1
4770 A Kerberos service ticket was renewed
Domain Controller, Audit Success
5145 A network share object was checked to see whether client can be granted desired access.
Audit Success, Audit Failure
5152 The Windows Filtering Platform has blocked a packet.
Audit Failure
5153 A more restrictive Windows Filtering Platform filter has blocked a packet.
Audit Success
5156 The Windows Filtering Platform has allowed a connection.
Audit Success
5157 The Windows Filtering Platform has blocked a connection.
Audit Failure



© netikus.net ltd 2002-2023 | EventSentry | Event Log Messages | Codes | AppLocker | Privacy Policy