Windows EventInformation
Windows Event ID 4793 – Microsoft-Windows-Security-Auditing: An attempt was made to call a privileged service
Event ID 4793 logs when a process attempts to call a privileged service operation. This security audit event tracks service privilege usage for compliance monitoring and security analysis.