Elastic Windows Event Explorer
Channel - Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController
Publishers
Microsoft-Windows-AuthenticationProvider