Skip to content

Credential-Access

Windows Event ID 4614: A notification package (password filter) has been loaded by the SAM

July 3, 2026

Windows Event ID 4648: A logon was attempted using explicit credentials

July 3, 2026

Windows Event ID 4692: Backup of data protection master key was attempted

July 3, 2026

Windows Event ID 4693: Recovery of data protection master key was attempted

July 3, 2026

Windows Event ID 4768: A Kerberos authentication ticket (TGT) was requested

July 3, 2026

Windows Event ID 4769: A Kerberos service ticket was requested

July 3, 2026

Windows Event ID 4782: The password hash of an account was accessed

July 3, 2026

Windows Event ID 5058: Key file operation

July 3, 2026

Windows Event ID 5059: Key migration operation

July 3, 2026

Windows Event ID 5376: Credential Manager credentials were backed up

July 3, 2026

Windows Event ID 5377: Credential Manager credentials were restored from a backup

July 3, 2026

Windows Event ID 5378: The requested credentials delegation was disallowed by policy

July 3, 2026