Where to find status and substatus code description of security events

Question

Is there an official resource or documentation where I can find detailed information on status and substatus codes for security events, specifically event 4625

Answer 1

Hi,

You can find the NTSTATUS values over here

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/596a1078-e883-4972-9bbc-49e60bebca55

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.