Elastic Windows Event Explorer
Channel - Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController
Publishers
Microsoft-Windows-AuthenticationProvider
Microsoft-Windows-NTLM