Elastic Windows Event Explorer
Publisher - Microsoft-Windows-UserAccessLogging
Event IDs
0
1