Where's the 4624? - Logon Events vs. Account Logons

**Here's a new 13Cubed episode for you! Visit** [**13cubed.com**](https://13cubed.com) for more.

Let's learn about the difference between "Logon Events" and "Account Logons" and explore a scenario in which communication occurs between two domain-joined workstations. Where will we find Event ID 4624 and other account-related Event IDs of interest?

[https://www.youtube.com/watch?v=EXsKJ9kIc6s](https://www.youtube.com/watch?v=EXsKJ9kIc6s)

account communication computerforensics domain event events find ids interest joined learn logon scenario workstations