Skip to content

Credential-Access

4614 A notification package (password filter) has been loaded by the SAM

4648 A logon was attempted using explicit credentials

4692 Backup of data protection master key was attempted

4693 Recovery of data protection master key was attempted

4768 A Kerberos authentication ticket (TGT) was requested

4769 A Kerberos service ticket was requested

4782 The password hash of an account was accessed

5058 Key file operation

5059 Key migration operation

5376 Credential Manager credentials were backed up

5377 Credential Manager credentials were restored from a backup

5378 The requested credentials delegation was disallowed by policy