Product
Windows
Microsoft Windows Operating System - comprehensive desktop and server platform
XML
Event 4625 Version 0 locked-out interactive logon; registry user, computer and domain; UTC clock and synthetic independent record ID.
XML
clop_persistence
LowCLOP Ransomware Service Installation - Known persistence mechanism used by CLOP ransomware family