Elastic Windows Event Explorer
Channel - Microsoft-Windows-Authentication User Interface/Operational
Publishers
Microsoft-Windows-Shell-AuthUI