1. Logon ID
   1. 4611
   2. 4624
   3. 4648
   4. 4776
2. Logoff ID
   1. 4643
   2. 4779
3. Privilege Usage ID
   1. 4672
   2. 4673
   3. 4674
   4. 4703
   5. 4768
   6. 4769
   7. 4771
4. Process Executed ID
   1. 4688
5. Process Terminated ID
   1. 4689
6. Account MGMT ID
   1. 4720
   2. 4722
   3. 4724
   4. 4726
   5. 4728
   6. 4737
   7. 4738
7. Handles ID
   1. 4656
   2. 4658
   3. 4659
   4. 4660
   5. 4661
   6. 4663
   7. 4690
8. Policy Change ID
   1. 4670
   2. 4904
   3. 4905
   4. 4946
   5. 4947
9. File Sharing ID
   1. 5140
   2. 5142
   3. 5144
   4. 5145
10. VSS ID
    1. 8222
11. System ID
    1. 7036
    2. 7040
    3. 7045
12. Application ID
    1. 102
    2. 103
    3. 105
    4. 216
    5. 300
    6. 302
    7. 2001
    8. 2003
    9. 2005
    10. 2006
13. Logs Cleared ID
    1. 104