windows-event-notes

windows-event-notes

General Notes

EventID 4096 | NetJoin

Useful to capture domain joining events every time a computer boots up. It captures DomainName and ComputerName.