Windows Event IDs for Incident Response

https://forensicate.net/posts/windows-event-ids-for-incident-response/