Windows 8 and Windows Server 2012 Security Event Details
Aqui os dejo el enlace desde donde podéis bajar esta excel con todos los Event ID y su descripciones: Windows 8 and Windows Server 2012 Security Event Details
| Logon/Logoff | Logon | 4626 | User/Device claims information. | Windows 8, Windows Server 2012 |
| Event ID | Detailed Message |
| 4608 | Windows is starting up. This event is logged when LSASS.EXE starts and the auditing subsystem is initialized. |
| 4609 | Windows is shutting down. All logon sessions will be terminated by this shutdown. |
| 4610 | An authentication package has been loaded by the Local Security Authority. This authentication package will be used to authenticate logon attempts. Authentication Package Name: %1 |
| 4611 | This logon process will be trusted to submit logon requests.
Subject: Logon Process Name: %5 |
Espero que os sea de utilidad!!!
