Active_Directory_Security / Find who changed membership, source host, authentication method, before/after state, related privilege events, and authorization context. · size 20 · threshold 4 · max attempts 3