Additionally, you can add event ID 12294 to search for potential attacks against the Administrator account.

• 此外,还可以添加事件ID 12294来搜索对“管理员”帐户的潜在攻击。