Glossary: Security Operations and Incident Response

Windows event IDs

Also written: 4624, 4625, 4663, 4720, 4732, 1102, 7045, event ID

Numbers for Windows log entries: 4624 successful sign-in, 4625 failed sign-in, 4663 object access, 4720 account created, 4732 member added to a security-enabled local group, 1102 audit log cleared, 7045 new service installed.