Skip to content

Glossary: Passwords, Automation and AI in Security Operations

Security event log

Also written: event 4720, 4726, 4738, 4740, event numbers

The Windows log that records account changes under fixed event numbers an audit can search for: 4720 (account created), 4726 (deleted), 4738 (changed) and 4740 (locked out).

Where the book teaches it

Related terms

account auditingaccount lockout