Elastic Windows Event Explorer
Publisher - Microsoft-Windows-NTLM
Event IDs
100
101
4001
4002
4003
4010
4011
4012
4013
8001
8002
8003