Windows EventInformation
Windows Event ID 1125 – User32: User Logon Session Notification
Event ID 1125 from User32 indicates a user logon session notification event, typically fired during interactive logon processes or session state changes in Windows environments.
