Windows EventInformation
Windows Event ID 4611 – LSA: A trusted logon process has been assigned to an authentication package
Event ID 4611 fires when the Local Security Authority (LSA) assigns a trusted logon process to an authentication package, indicating normal authentication subsystem initialization or configuration changes.