Glossary: Application and Credential Attacks, and AI Risks

Windows event IDs (4625, 4732, 4740)

Also written: event ID 4625, event ID 4732, event ID 4740, 4625, 4732, 4740

Windows log entries that flag attacks: 4625 is a failed sign-in (many for one account suggest brute force), 4740 is "A user account was locked out", and 4732 is a member added to a security-enabled local group (an unexpected one is a privilege escalation clue).