Event ID:
4608
Category:
System
Subcategory:
Security State Change
Supported on:
Windows Vista, Windows Server 2008
Windows is starting up.
This event is logged when LSASS.EXE starts and the auditing subsystem is initialized.
Windows security encyclopedia
#microsoft #windows #security