Windows Events

Windows Security Log Encyclopedia (ultimatewindowssecurity.com)

4624(S) An account was successfully logged on. (Windows 10) - Windows security | Microsoft Docs

4625(F) An account failed to log on. (Windows 10) - Windows security | Microsoft Docs

4768(S, F) A Kerberos authentication ticket (TGT) was requested. (Windows 10) - Windows security | Microsoft Docs

https://www.alteredsecurity.com/post/fantastic-windows-logon-types-and-where-to-find-credentials-in-them

Audit policy

https://docs.google.com/spreadsheets/d/1BhR3cymZ53ZJfJdKAGKszuB-jgsr8GBJBOCJl50WGKE/htmlview

AD

https://github.com/lkarlslund/adalanche