Windows EventInformation
Windows Event ID 5632 – LSA: Authentication Package Loaded
Event ID 5632 indicates that an authentication package has been loaded by the Local Security Authority (LSA). This security audit event tracks when authentication providers are initialized during system startup or security subsystem changes.
