#event-id-4672

1 article

Windows Events1

Windows security monitoring dashboard displaying Event ID 4672 privilege assignment logs in a professional SOC environment

Event 4672

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4672 – Security: Special Privileges Assigned to New Logon

Event ID 4672 fires when Windows assigns special privileges to a new user logon session, indicating elevated access rights have been granted to an account.

March 189 min