Elastic Windows Event Explorer
Publisher - Microsoft-Windows-AuthenticationProvider
Event IDs
101
304