Welcome to Event-o-Pedia
Ex: logon failure -"account disabled" -"LogType:Windows Event Log"
Found categories (1 - Events, 0 - Folders):
EventID 4696 - A primary token was assigned to process.
Indicates an either successful service start or a scheduled task executing a program under the authority of a different user. Find more information about this event on ultimatewindowssecurity.com. C...
Operating System->Microsoft Windows->Built-in logs->Windows 2008 or higher->Security Log->Detailed Tracking->Process Creation->EventID 4696 - A primary token was assigned to process.