Use Microsoft Log Parser for trolling through the Event Viewer
Sifting through the thousands of entries in a server’s local Security Event log for a specific message can be a very time consuming experience.
These were the top 10 stories published by Sam Kenny’s a(musing); you can also dive into yearly archives: 2013, 2014, and 2016.