Elastic Windows Event Explorer
Publisher - Microsoft-Windows-EDP-Audit-TCB
Event IDs
101