1. Logon ID
    1. 4611
    2. 4624
    3. 4648
    4. 4776
  2. Logoff ID
    1. 4643
    2. 4779
  3. Privilege Usage ID
    1. 4672
    2. 4673
    3. 4674
    4. 4703
    5. 4768
    6. 4769
    7. 4771
  4. Process Executed ID
    1. 4688
  5. Process Terminated ID
    1. 4689
  6. Account MGMT ID
    1. 4720
    2. 4722
    3. 4724
    4. 4726
    5. 4728
    6. 4737
    7. 4738
  7. Handles ID
    1. 4656
    2. 4658
    3. 4659
    4. 4660
    5. 4661
    6. 4663
    7. 4690
  8. Policy Change ID
    1. 4670
    2. 4904
    3. 4905
    4. 4946
    5. 4947
  9. File Sharing ID
    1. 5140
    2. 5142
    3. 5144
    4. 5145
  10. VSS ID
    1. 8222
  11. System ID
    1. 7036
    2. 7040
    3. 7045
  12. Application ID
    1. 102
    2. 103
    3. 105
    4. 216
    5. 300
    6. 302
    7. 2001
    8. 2003
    9. 2005
    10. 2006
  13. Logs Cleared ID
    1. 104