PersistenceWindows Event ID 4697: A service was installed in the systemJuly 3, 2026Windows Event ID 4698: A scheduled task was createdJuly 3, 2026Windows Event ID 4720: A user account was createdJuly 3, 2026Windows Event ID 4780: The ACL was set on accounts which are members of administrators groups (AdminSDHolder)July 3, 2026Windows Event ID 4794: An attempt was made to set the DSRM administrator passwordJuly 3, 2026Windows Event ID 4946: A rule was added to the Windows Firewall exception listJuly 3, 2026Windows Event ID 5136: A directory service object was modifiedJuly 3, 2026Windows Event ID 5888: An object in the COM+ Catalog was modifiedJuly 3, 2026Windows Event ID 5890: An object was added to the COM+ CatalogJuly 3, 2026