Windows Event Logs Checklist A list of logs to check when auditing security events Logon Types Logon Session Events Logon Failure Codes User Account Changes Group Changes Domain Controller Authentication Events Kerberos Failure Codes