How to get the answer to this question in WINDOWS ATTACKS & DEFENSE module? I checked the event log but I could not find it please help.
In event viewer, using filter for 4769 event and find in the details tab of each security event, find the “webservice” in ServiceName.