Logon Event

Noun · Security & Infosec

Definitions

  1. A system-recorded event indicating that a user or service has logged on, often used specifically in Windows auditing contexts. Logon events help investigators understand which accounts authenticated where, by what method, and at what time.

    In plain English: A recorded event showing that a user or service signed in.

    Example: "The Windows logon event data confirmed the service account had authenticated interactively, which should never happen."

Related Terms