Windows Event Code 一覧

EventCode	意味	---
1102	The audit log was cleared.	---
---	---	---
---	---	---
4624	An account was successfully logged on.	---
4625	An account failed to log on	---
4634	An account was logged off.	---
4662	An operation was performed on an object.	---
4672	Special privileges assigned to new logon.	---
4688	A new process has been created.	---
4719	System audit policy was changed.	---
4720	A user account was created.	---
4768	A Kerberos authentication ticket (TGT) was requested.	---
4769	A Kerberos service ticket was requested.	---
4771	Kerberos pre-authentication failed.	---
4776	The computer attempted to validate the credentials for an account.	---
---	---	---
---	---	---
---	---	---
---	---	---

参考リンク

• https://learn.microsoft.com/ja-jp/windows-server/identity/ad-ds/plan/appendix-l--events-to-monitor