Elastic Windows Event Explorer
Channel - Microsoft-Windows-NTLM/Operational
Publishers
Microsoft-Windows-NTLM
Microsoft-Windows-Security-Netlogon